Package: fail2ban
Version: 1.0.2-2
Severity: serious
Tags: sid trixie bookworm
Hello,
The default journalmatch for ssh the following:
filter.d/sshd.conf: journalmatch = _SYSTEMD_UNIT=sshd.service + _COMM=sshd
But the .service file for ssh in debian is called ssh.service, not
sshd.service
If I run journalctl _SYSTEMD_UNIT=sshd.serviceĀ _COMM=sshd, I get no
entries.
If I run journalctl _SYSTEMD_UNIT=ssh.serviceĀ _COMM=sshd , I get the logs
I think there are still something broken with the switch to journald
The configuration should be changed to: "_SYSTEMD_UNIT=ssh.service
_COMM=sshd" IMVHO
Kind regards,
Laurent Bigonville