FWIW it appears that this bug is essentially a duplicate of #770171:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=770171 On 7/7/23 19:04, José Miguel Gonçalves wrote:
As Debian opted by systemd journal as the default logging mechanism for bookworm, maybe a better option would be to change the default configuration in '/etc/fail2ban/jail.conf' to select journal as the logging source, i.e., instead of setting 'backend = auto', set 'backend = systemd'.
That seems like a sensible suggestion to me.Can you confirm that the current default bookworm fail2ban config/regex works with sshd with just this change (to 'backend' in /etc/fail2ban/jail.conf)? Or are further adjustments required?
Regards, Jeremy
OpenPGP_signature
Description: OpenPGP digital signature
