i have fail2ban on server but everytime fail2ban conducts a log rotation it unbans all the banned IP's. I have ip's to be banned for a week whenever a log rotation happens or i restart fail2ban i dont want all the ip's released! I was thinking there was a script or patch that would fix this but i have come up short.
View 2 RepliesI'm trying to use a technique suggested by a fella at this website....
[URL]
He suggests adding an echo line to the actionban line in order to create or add to a file that will contain a list of all the IP's that fail2ban has banned.....but it doesn't seem to generate any output. .....here is the command.....
actionban = iptables -I fail2ban- 1 -s -j DROP
echo >> /etc/shitlist
I never get any IP's in the file so the echo part does not seem to work.
My fail2ban won't block relay attempts (it does block ssh)
mail.log contains lots of
Code:
NOQUEUE: reject: RCPT from 118-167-6-196.dynamic.hinet.net[118.167.6.196]: 554 5.7.1 <333@fgytry.myip.org>: Relay access denied
jail.conf
[Code]....
Seem my rotation part is not removing files older than 90 days. Anybody know what is wrong?
Code:
#!/bin/sh
#navigate to the desired backup location
cd /public/backup/linux
#dump the MySQL entirely, output file is dated
mysqldump -u root -pmt1jxz68f2 --all-databases > "`date +%Y%m%d`.sql"
#backup the web folder
[Code]...
I have 1 Ubuntu server acting as a gateway / proxy and a bunch of iptables rules to log packets from each of these systems. This is done to monitor internet acces. The resulting log file grows to about 80 - 100Mb on a daily basis. I tried setting up log logrotate ( through webmin as well as manually ) to rotate this log file every night at 11:00 pm. However, the file does not get rotated. when i run logrotate -d /etc/logrotate.conf everything goes through fine. i get a message saying that the file qualifies for rotation and no errors.
If i manually force the rotation ( through webmin ) it happens. However, on its own, the log file does not get rotated. I am completely stumped. I tried replicating the exact same settings that are set for syslog rotation, and still no luck. All the other log files do get rotated at the appropriate time ( i have checked in the /var/log/ directory ), but this one does not. I thought it might have been because i had some prerotate and postrotate scripts. Manually forcing rotation did not generate any errors and the scripts ran without any problems. But even then, i removed those scripts, and still no luck. this is the config file for logrotate ( in /etc/logrotate.d/bcrl )
[code]...
I updated the system just one day before this problem ( the second one ) surfaced, but i do not remember what got updated. is there any way to check?
Currently suffering from this bug:If you don't want to read the whole thing, it appears fail2ban overloads IPTables when you have too many jails, and sends a wholeload of commands at once.I attempted to use the workaround making it sleep for a random period of time, but this does not help at all, it still fails like it used to.Any ideas? Fail2ban is a pretty popular app...Ubuntu 9.10.
Code:
$ aptitude show fail2ban
Package: fail2ban
[code]...
I installed fail2ban from the Ubuntu Software Center (Ubuntu 10.10) and everything seemed to go fine. But when I try to access the client I get this output:
Code:
wolfgang@Culture:/var/log$ fail2ban-client status
ERROR Unable to contact server. Is it running?
[code]....
I'm trying to implement this method to block php injection attack using fail2ban: here it is, however I'm not sure it applies to Ubuntu. You see, there's this filter that must be added to the fail2ban jail file:
HTML Code:
[php-url-fopen]
enabled = true
port = http,https
filter = php-url-fopen
[Code]....
Currently suffering from this bug:If you don't want to read the whole thing, it appears fail2ban overloads IPTables when you have too many jails, and sends a whole load of commands at once.I attempted to use the workaround making it sleep for a random period of time, but this does not help at all, it still fails like it used to.Any ideas? Fail2ban is a pretty popular app...Ubuntu 9.10.
Code:
$ aptitude show fail2ban
Package: fail2ban
[code]...
I'm getting loads of hacking attempts on my pop3 daemon. Looks like fail2ban is not stopping it. How to ban these type of attacks?
Dec 2 12:14:49 sosaria pop3d: Disconnected, ip=[::ffff:109.81.181.238]
Dec 2 12:14:49 sosaria pop3d: Connection, ip=[::ffff:109.81.181.238]
Dec 2 12:14:49 sosaria pop3d: LOGIN FAILED, user=duky, ip=[::ffff:109.81.181.238]
Dec 2 12:14:54 sosaria pop3d: Disconnected, ip=[::ffff:109.81.181.238]
Dec 2 12:14:54 sosaria pop3d: Connection, ip=[::ffff:109.81.181.238]
[Code] ....
I've got in my /etc/fail2ban/jail.local:
[dovecot]
enabled = true
port = pop3,pop3s,imap,imaps
filter = dovecot
logpath = /var/log/mail.log
maxretry = 3
[Code] .....
I yesterday installed fail2ban on my server and I see I am not getting logs for the genuine people also who log in to my machine.In
Quote:
/var/log/auth.log
It is a Ubuntu server and I had installed fail2ban via
Quote:
apt-get install
I thought some thing might be in
Quote:
/var/log/fail2ban.log
but there I do not see any thing
Quote:
2011-02-10 20:26:35,002 fail2ban.server : INFO Changed logging target to /var/log/fail2ban.log for Fail2ban v0.8.4
2011-02-10 20:26:35,003 fail2ban.jail : INFO Creating new jail 'ssh'
2011-02-10 20:26:35,003 fail2ban.jail : INFO Jail 'ssh' uses poller
2011-02-10 20:26:35,031 fail2ban.filter : INFO Added logfile = /var/log/auth.log
[Code].....
I've had fail2ban setup for awhile for my SSH server, and that works beautifully (I had someone I knew attempt to access it and get banned) however I then tried to set it up to ban people scanning my webserver for lots of other pages which dont exist (and have never been linked to) such as phpMyAdmin.
In my jail.conf I have:
Code:
However Looking at this I realise I need to edit the filter.d/apache-error.conf
I'm not sure exactly how to setup the regex to ban the correct hosts
The errors from the scanners are like this:
Code:
I am having issues getting yum to work with the repos for fail2ban and denyhosts. I followed the centos link on installing/cfg repos. However every time i run yum install fail2ban or denyhosts it does not find the software. I read in several google searches that I should be able to install it using yum. Is that info wrong? These are the link I was s reading too from centos. [URL]. I know I can download the rpm or a tar file but I would like to keep it in sync with yum if possible. May be I have the wrong repo? CentOSPlus is enabled also.
View 3 Replies View RelatedI have been trying for days now to get this to work. didn't want to bother people with my questions, i have installed Fail2Ban 0.8.4 on CentOS 5.4.
I get the email notifications from Fail2Ban stating that it just blocked another IP, however, when i look at the iptables through webmin, nothing is actually in there, also the log/secure file dose not show that the ip has been blocked.
Even when I try to log-in with the wrong password, after a few tries i get the email telling me that my ip is blocked, however, I can still SSH using my 'blocked' IP.
I choose a rotating background for the desktop (astronomical pictures). How can I stop this rotation and decide to keep a specific picture instead of letting the system rotate the background every few seconds?
View 6 Replies View RelatedI have up graded to natty 11.04 and am trying to get magick rotation 1.4 working on my hp tx2000 model 2130ea.I have spent a lot of time reading the forums and trying stuff including breaking natty a few times and had ton do a reinstall. Anyway I am not to sure what I am doing wrong missing a script or something I have tried a few different ways to try and rotate screen at the moment I have magick rotation installed and the only thing I can do with it is turn on/off touch and if I move the courser over the green arrow icon a drop down box appears saying its loading. I did turn on the bug report and this is what it says I attached the log.
View 7 Replies View RelatedI can't seem to get my ldap.log file to rotate on Ubuntu 9.10. I've added to the logrotate.conf file the following..
/var/log/ldap.log {
missingok
monthly
create 0660 root utmp
rotate 1 }
I have also tried putting the path to the file /etc/logrotate.d/rsyslog. Restarted services and still no logrotation for the ldap.log..
I have a Linux program which can write information to stdout and stderr.
I have a shell script which redirects that output to a file in /var/log. (Via >> and 2>&1.)
Is there a way to make that log file rotate? (max size, then switch to a different file, keep only a limited number of files)
I've seen a few answers which talk about the logrotate program, which sounds good, but they also seem to be focused on programs which are generating log files internally and handle HUP signals. Is there a way to make this work with a basic output redirection script?
I have recently done a clean install of Lucid Lynx and set everything up the way I had it in Jaunty (skipped Karmic). However, I am now having problems with the Compiz Cube and Firefox 3.6.
Whenever I rotate my workspace that contains a Firefox window that is active, the animation is very jerky and slow. It is fine if Firefox is a background window. This was never a problem in Jaunty with Firefox 3.0.
Is anyone else having this problem? Does anyone know how I might be able to fix it? I have tried disabling all addons in Firefox.
My PC: Core 2 Duo E7400, Geforce 7010 (onboard), 2GB RAM
UPDATE: starting Firefox in Safe Mode seems to help a little. Not sure why though...
I have a slight problem with setting of a stylus in my Tecra m7. It works fine when screen is in default position, but when I rotate the screen to vertical (left/CCW) touchpad and stylus input does not change so when I move it up it it goes right ^^'
xinput goes like this:
Code:
I already tried few .sh's from this forum archives but it didn't seem to work. I disabled driver for graphic card, because recommended version showed only violet screen when starting system and older version does not support rotation. I use Ubuntu 10.10 with Gnome.
I am running Kubuntu 10.10 x64, using a Wacom Bamboo (CTH-460), I installed it by compiling the driver and moving the file as in every tutorial I could find in the Internet. The pen works perfectly, except by the fact I use TwinView and the tablet uses all the width, too sensitive. but this is something I plan to fix later... (pressure is OK)
the problem is the touch.. It almost works, right click, zoom and scroll support is ok, I believe there is no support to rotation but I can live without it... The problem is the cursor movement, seems to be a sensitivity issue. If I move very slow there is no problem, but if i move a little faster the cursor stops as if I had removed the finger from the sensor. When I try to scroll or zoom I have a similar problem, it moves an inch before it start to scroll as if it wasn't sensing the second finger, but right click is perfect so I don't think this is the problem.
Would this be a bug? Is there a way to calibrate the touch sensor? I remember editing the xorg.conf to make the touch fit the screen size in a HP Tx2510us, and to make two finger scroll on to touch pad but it was in 8.10 I believe, I cant find something like it for this problem. wacomcpl cant see the device, xsetwacom list returns nothing... xinput list returns this:
[Code]....
How can I get the cube rotation on a laptop with a touchpad? I love it on my desktop at work, really gets a great "WOW!" when people see it in action.I have the CSSM and extras installed, but can't figure out the keybindings with the touchpad.....
View 4 Replies View RelatedI have a big problem my hard drive is works fast all the time and now i hear clicks and scratching and weird stuff from so how can i make it slow down. i cant buy a new one if it breaks down ...
View 6 Replies View RelatedI am running a dual monitor setup, and prefer to have my secondary monitor rotated 90 degrees. I am able to do this in Gnome using preferences, and am wondering how to accomplish the same in XFCE.
View 6 Replies View RelatedI have configured /etc/syslog.conf for writing user level log messages, and it is working fine.
The line which i entered is: user.* /home/shekhar/obj/myjob.log
But the log file keeps increasing. I would like to rotate the log file when it reaches 100Kb.
How do i do that in red hat linux ?
I have an HP Pavilion tx2000 tablet, wich is working perfectly in Ubuntu 10.04. The touch and the stylus works out of box, and i'm using the script that Favux has posted to rotate my screen and i've installed the wacomrotate daemon, wich is working too. Now, I've two questions: How to calibrate it? The stylus is ok, but the touch isn't calibrated. In Karmic, I was using wacomcpl and xsetwacom, but neither of them detect my tablet now (in 9.10, Hal was used to detect the tablet, now it's xserver-xorg-input-wacom).
[code]...
It's possible to set up the automatic screen rotation, like in Windows (the screen rotates automaticaly in tablet position)?
Recently installed ubuntu on my gateway m275 tablet alongside windows xp tablet. Everything, including the stylus/pen without any poking around. However, I'm having trouble getting the screen orientation to rotate.
If I go to system-preferences-monitors, the only option for rotation is "normal".
Here is my xorg.conf:
Code:
I just installed ubuntu 10.04.02 on to my tablet, aside from the dreaded intel video problem. Install went ok, but I'm finding now. That when I rotate the screen, the touch screen isn't adjusting to match. I'm not really ubuntu savvy.
View 6 Replies View RelatedI have fedora 10 and I rotated my display upside down using Display settings (I don't know if it is the same thing as system-config-display, I had an icon called Display settings on my panel). It didn't work, my screen became black and now I can't change it back. Can I somehow change it back using terminal only? There's no rotation set in my xorg.conf file, I tried to set different rotation in xorg.conf, but it had no effect.
View 2 Replies View RelatedI have a big LCD screen.I make it 90 degrees retated to play games .But I want to know :if I can get rotation in boot up? I'm using Fedora 12 in KDE. My screen display driver is Intel . I think can write something into /etc/X11/xorg.conf to make it,or write into KDE's init script /usr/bin/startkde ( if there is a command like"rotate 90",then I can write it here).
View 3 Replies View Related