Re: Bookworm, fail2ban and sshd
On Thu, 14 Mar 2024 22:27:36 +0000
Andy Smith <andy@strugglers.net> wrote:
> I think you want to set "backend = journald" in
> /etc/fail2ban/jail.conf or its usual local override, but I have not
> tested this as I still use rsyslogd.
Thanks, but no cigar. I also tried setting backend to systemd (as noted
in man jail.conf). Also no go.
The man page also suggest specifying the path to the journal. I tried
[DEFAULT]
backend =
systemd[journalpath=/var/log/journal/2284a3a8f11544c5a5c355d3ff3e744d/]
That worked if I disabled sshd, but sshd still doesn't like it.
--
Does anybody read signatures any more?
https://charlescurley.com
https://charlescurley.com/blog/
Reply to: