• If you are still using CentOS 7.9, it's time to convert to Alma 8 with the free centos2alma tool by Plesk or Plesk Migrator. Please let us know your experiences or concerns in this thread:
    CentOS2Alma discussion
  • Inviting everyone to the UX test of a new security feature in the WP Toolkit
    For WordPress site owners, threats posed by hackers are ever-present. Because of this, we are developing a new security feature for the WP Toolkit. If the topic of WordPress website security is relevant to you, we would be grateful if you could share your experience and help us test the usability of this feature. We invite you to join us for a 1-hour online session via Google Meet. Select a convenient meeting time with our friendly UX staff here.

Resolved fail2ban doesn't seem to work

DimitrisG

Basic Pleskian
I am running a fresh install of Onyx on ‪CentOS Linux 7.3.1611.

fail2ban seems to be running fine (no errors)

# systemctl status fail2ban.service -l
● fail2ban.service - Fail2Ban Service
Loaded: loaded (/usr/lib/systemd/system/fail2ban.service; enabled; vendor preset: disabled)
Active: active (running) since Thu 2016-12-29 12:46:57 EET; 8s ago
Docs: man:fail2ban(1)
Process: 10790 ExecStart=/usr/bin/fail2ban-client -x start (code=exited, status=0/SUCCESS)
Process: 10788 ExecStartPre=/usr/bin/mkdir -p -m 755 /var/run/fail2ban (code=exited, status=0/SUCCESS)
Main PID: 10795 (fail2ban-server)
Memory: 18.0M
CGroup: /system.slice/fail2ban.service
├─10795 /usr/bin/python /usr/bin/fail2ban-server -s /var/run/fail2ban/fail2ban.sock -p /var/run/fail2ban/fail2ban.pid -x -b
└─10797 /usr/libexec/gam_server

I am doing a few tests but nothing appears in /var/log/fail2ban.log

After stoping it and starting it again within the Plesk UI all my previous tests suddenly appear in the logs (and in Plesk UI) and IP ban works.

# tail fail2ban.log
2016-12-29 12:46:57,050 fail2ban.jail [10795]: INFO Jail 'plesk-wordpress' started
2016-12-29 12:46:57,503 fail2ban.filter [10795]: INFO [recidive] Found x.x.x.x
2016-12-29 12:46:57,553 fail2ban.filter [10795]: INFO [recidive] Found x.x.x.x
2016-12-29 12:46:57,567 fail2ban.filter [10795]: INFO [recidive] Found x.x.x.x
2016-12-29 12:46:58,069 fail2ban.actions [10795]: NOTICE [recidive] Ban x.x.x.x
2016-12-29 12:46:58,289 fail2ban.filter [10795]: INFO [recidive] Found x.x.x.x
2016-12-29 12:46:58,318 fail2ban.filter [10795]: INFO [recidive] Found x.x.x.x
2016-12-29 12:47:00,218 fail2ban.actions [10795]: NOTICE [recidive] Ban x.x.x.x
2016-12-29 12:47:09,374 fail2ban.actions [10795]: NOTICE [recidive] Unban x.x.x.x
2016-12-29 12:50:31,137 fail2ban.filter [10795]: INFO [plesk-roundcube] Found x.x.x.x

If I try do another test after the fail2ban restart nothing appears in fail2ban.log again (until I do another f2b restart).

Any thoughts?

ps. I've tried uninstalling it (also removing /etc/fail2ban) and installing it again but the same thing happens + I haven't added any jails or changed any of the settings.
 
same problem here. Fail2ban is working bad.

i can start now the service but i can acced now to the iptables in psa panel to list banned ips. endless loading happen.
 
Back
Top