Hi there!

I have difficulties getting fail2ban actually banning IP addresses for
one of my public machines running Guix System.

There is this one IP address trying to log in through ssh every minute
or so (failing, since logging in only works with key and not with
password), but I'd like to have the address banned.  So I configured
fail2ban according to the documentation and deployed.  The service
starts and is running, but no bans are issued.  I tried configuration
through both, the fail2ban-service-type and fail2ban-jail-service.
Current configuration looks like this:

   (service
    (fail2ban-jail-service
     openssh-service-type
     (fail2ban-jail-configuration
      (name "sshd")
      (enabled? #t)))
    (openssh-configuration
     (openssh openssh-sans-x)
     (permit-root-login #t)
     (port-number port-num)
     (authorized-keys
      `(("root" ,(local-file
                  (string-append (getenv "HOME")
                                 "/.ssh/id_ed25519.pub")))))))

Any ideas what I am missing?

TIA
gabber

Reply via email to