Package: fail2ban
Version: 0.11.2-2
Severity: normal

Dear Maintainer,

I'm having an issue with fail2ban in combination with firewalld.

Syslog:
--
May 12 13:26:35 server01 firewalld[437]: ERROR: '/usr/sbin/iptables-restore -w 
-n' failed: iptables-restore v1.8.7 (nf_tables): invalid port/service `0-65535' 
specified#012Error occurred at line: 2#012Try `iptables-restore -h' or 
'iptables-restore --help' for more information.
May 12 13:26:35 server01 firewalld[437]: ERROR: COMMAND_FAILED: 
'/usr/sbin/iptables-restore -w -n' failed: iptables-restore v1.8.7 (nf_tables): 
invalid port/service `0-65535' specified#012Error occurred at line: 2#012Try 
`iptables-restore -h' or 'iptables-restore --help' for more information.
--

This causes firewalld.service to stop working and leaving it in a stopped 
state; what opens the gates.
I'm using firwall-cmd v0.9.3 to manage the Debian firewall.

This seems to be a known, fixed, issue: 
https://github.com/fail2ban/fail2ban/issues/3047


-- System Information:
Debian Release: 11.3
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.10.0-14-amd64 (SMP w/1 CPU thread)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages fail2ban depends on:
ii  lsb-base  11.1.0
ii  python3   3.9.2-3

Versions of packages fail2ban recommends:
ii  iptables           1.8.7-1
ii  nftables           0.9.8-3.1
pn  python3-pyinotify  <none>
pn  python3-systemd    <none>
pn  whois              <none>

Versions of packages fail2ban suggests:
ii  mailutils [mailx]            1:3.10-3+b1
pn  monit                        <none>
ii  rsyslog [system-log-daemon]  8.2102.0-2
pn  sqlite3                      <none>

-- no debconf information

Reply via email to