Searching Log-Files for Fail2Ban

[Grossmann-Grupp]

Hi!

I have installed Fail2Ban today. But there are some problems to find the right Logs.

Here the Error...

ERROR No file found for /var/log/sshd.log
ERROR No file found for /var/log/postfix.log
ERROR No file found for /var/log/auth.log
ERROR No file found for /var/log/named/security.log
ERROR No file found for /var/log/sshd.log
ERROR No file found for /var/log/apache*/*error.log
ERROR No file found for /home/www/myhomepage/error.log
ERROR No file found for /var/log/named/security.log
ERROR No file found for /var/log/proftpd/proftpd.log
ERROR No file found for /var/www/*/logs/access_log
2010-07-30 09:10:45,120 fail2ban.server : INFO Starting Fail2ban v0.8.4
2010-07-30 09:10:45,121 fail2ban.server : INFO Starting in daemon mode

No I search for the Logs I can use... Did you have an Idea?

King Regards

Jörg

 

[IgorG]

Plesk log files have other location.
sw-cp-server log file is /var/log/sw-cp-server/error_log, client's vhosts log file /var/www/vhosts/domain.com/statistics/logs/error_log, maillog - /usr/local/psa/var/log/maillog, for example.

 

[Grossmann-Grupp]

Hi IgorG!

Thanks allot for your Feedback.
But which Log is for which Service?

As example:
Searched Location and Filename ==> Plesk Location and Filename
/var/log/sshd.log ==> /var/log/sw-cp-server/error_log ( IT'S ONLY AN EXAMPLE!!! )
Can you please reply with the Log File path in this form please?


Thanks allot!

King Regards
Jörg

 

[IgorG]

Hint - look at /etc/syslog.conf
You can find valuable information in 'man syslog'
Good luck!

 

[Dan Mikkelsen]

Hi

I cant seem to find the syslog file. (i can't seem to find anything on the server actually.. I purchased it as a plesk server where everything is preinstalled and cant find out where stuff like mysql or proftpd are located so i can add these to fail2ban also :-/ )

But do plesk automatically block ip adresses from keep trying to log into the panel? If not, where are the failed login attempts stored, and are they in a format that is alredy supported by fail2ban?

 

[Amin Taheri]

/var/log/secure

ERROR No file found for /var/log/sshd.log
ERROR No file found for /var/log/proftpd/proftpd.log

/var/log/httpd/error_log

ERROR No file found for /var/log/apache*/*error.log

Domain error logs are in
/var/www/vhosts/*/statistics/logs/access_log
/var/www/vhosts/*/statistics/logs/error_log

ERROR No file found for /home/www/myhomepage/error.log
ERROR No file found for /var/www/*/logs/access_log

Some of this you can probably find in /var/log/messages or /var/log/secure and maybe even /var/log/maillog but not clear on that one, I dont use named or mail servers on my plesk boxes so not 100% sure on those

ERROR No file found for /var/log/named/security.log
ERROR No file found for /var/log/postfix.log
ERROR No file found for /var/log/auth.log
ERROR No file found for /var/log/named/security.log