Question Fail2ban and Firewalld

[Nadeem Aslam]

Hi

On my server I'm running firewalld on centos7 after which I installed plesk

I have now installed Fail2ban and also did the plesk firewall which I found to just be iptables and not firewalld so I uninstalled that

I want to know if the plesk Fail2ban will be aware of firewalld and will be able to ban ip's successfully

I have made all changes in options in plesk I need for Fail2ban

As I'm a bit of novice I don't want to think I'm protected by Fail2ban and when it comes to crunch it actually fails

I prefer firewalld over iptables - just seems easier for a novice like me

Thanks

 

[Nadeem Aslam]

digging deeper and looking at the jail for apache say i see it's set with

action = iptables-multiport[name=apache, port="http,https,7080,7081"]

which means it will use iptables - which i'm not running so can i just amend that to the action required for firewalld

There must be someone else with similar configuration

 

[danami]

I think you are a bit confused. Firewalld is just a newer management interface for managing iptables. It still sends all its commands to iptables. My suggestion is to re-install the Plesk firewall and use it in conjunction with fail2ban. Firewalld is more suited to workstations anyway.