> Patch is working, but i can't use action_mw
> (output goes like this
> ---------------
> 2009-11-03 21:04:02,138 fail2ban.actions.action: ERROR printf %b "Subject:
> [Fail2Ban] cyrus: started
> From: Fail2Ban <fail2ban>
well -- that is what the patch you've applied accomplished
unfortunately :-/ since the mailing command is a multiline printf
command. imho instead of that patch I would simple tune up the action
for banning -- just add sleep 1 (or sleep 0.1 if system has that recent
sleep ;)) after each command and see how that helps
or may be alternatively just placing all commands on 1 line with ";"
between them -- so they should start as a one command (you said that
system tolerated that fine)
> All commands in one line work ok from command line.
interesting -- thanks for checking
> Sequence is also ok. Fail2ban launches actions in threads?
to say the truth -- I don't know exactly... from what I know, it just
calls system() from stdlib, which should call "/bin/sh -c '.....'"
I still think that the issue is deeper underground (iptables return
before actually completing modification of the table etc) although
myself could not replicate it on none of boxes (biefie enough: 8 cores,
64GB RAM etc) with smth like
for f in {1..100}; do /bin/sh -c "iptables -N fail2ban-proftpd; iptables -A
fail2ban-proftpd -j RETURN; iptables -I INPUT -p tcp -m multiport --dports
ftp,ftp-data,ftps,ftps-data -j fail2ban-proftpd; iptables -D INPUT -p tcp -m
multiport --dports ftp,ftp-data,ftps,ftps-data -j fail2ban-proftpd; iptables -F
fail2ban-proftpd; iptables -X fail2ban-proftpd"; done
now the question -- what is your /bin/sh? ;)
could you try different kernel? I've tried on 2.6.26-2-amd64
--
.-.
=------------------------------ /v\ ----------------------------=
Keep in touch // \\ (yoh@|www.)onerussian.com
Yaroslav Halchenko /( )\ ICQ#: 60653192
Linux User ^^-^^ [175555]
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
