Re: [Fail2ban-users] Problem on Centos 5.9 and errors

2015-01-18 Thread Joey J
Hello Lee, my settings haven't changed in a long time, maybe a year and never had an issue. I realized we are running 5.11 as well. This is happening on 3 of my 5.11 servers all the same. Interesting, I erase my fail2ban folder and the executable files and check the version and i get this: /usr/

Re: [Fail2ban-users] Question on creating a filter

2015-01-18 Thread David Highley
"Lee Clemens wrote:" > > Also, It reads the log file you configure it to read. Providing more > information regarding your specific setup would be useful. Log lines, > jail configuration, etc I tried using /var/log/journal/37a02967fe41491086922a957c45d552/system.journal and it found no matches

Re: [Fail2ban-users] Fail2ban and postfix with postscreen (Techswing33

2015-01-18 Thread Gary R. Schmidt
Hi, > > Is anyone running fail2ban with the postfix jail and postscreen? When > I run fail2ban and postfix taking out the postfix postscreen > component > it works fine, this is on an f21 system with FirewallD. The issue is > when postscreen is brought in to the picture, the blocking no longer > w

Re: [Fail2ban-users] Problem on Centos 5.9 and errors

2015-01-18 Thread Lee Clemens
I have a centos 5.11 server running fail2ban from epel without issues. I am using Python 2.4.3. RPM Package: fail2ban-0.8.14-1.el5 It seems there may be a general issue with your configuration files (missing closing, syntax related). Try increasing (in your case it seems, defining) a log leve

Re: [Fail2ban-users] Question on creating a filter

2015-01-18 Thread Lee Clemens
This matches for me: $ fail2ban-regex "Jan 17 20:18:47 new-spruce sshd[19177]: Failed password for root from 70.199.137.27 port 10835 ssh2" "Failed (?:password|publickey) for root from (?: port \d*)?(?: ssh\d*)?$" Note, I removed "%(__prefix_line)" from the regex supplied to fail2ban-regex. R

[Fail2ban-users] Fail2ban and postfix with postscreen

2015-01-18 Thread Techswing33
Hello, Is anyone running fail2ban with the postfix jail and postscreen? When I run fail2ban and postfix taking out the postfix postscreen component it works fine, this is on an f21 system with FirewallD. The issue is when postscreen is brought in to the picture, the blocking no longer works. If a

[Fail2ban-users] Problem on Centos 5.9 and errors

2015-01-18 Thread Joey J
Hello All, I have been running fail2ban for a long time but lately having issues because we still have some servers on Centos 5.9. If I run fail2ban source code 8.4 everything seems to run but get this error non-stop: 2015-01-17 22:52:48,458 fail2ban.filter : WARNING Unable to find a correspondin