I have been using fail2ban for several months, and so far it has worked
very well. Starting a few days ago, my logs began filling up with errors
like the one shown below. They all reference a file which does not
exist, namely libipt_f2b-sendmail-reject.so .
fail2ban.noarch - 0.9.6-1.el6.1 CentOS 6 - 2.6.32-696.10.1.el6.i686
Can someone help me understand what might be happening?
---------------------
2017-09-08 14:10:37,665 fail2ban.actions [1879]: NOTICE
[sendmail-reject] Unban 222.247.246.132
2017-09-08 14:10:37,769 fail2ban.action [1879]: ERROR iptables
-n -L INPUT | grep -q 'f2b-sendmail-reject[ \t]' -- stdout: ''
2017-09-08 14:10:37,769 fail2ban.action [1879]: ERROR iptables
-n -L INPUT | grep -q 'f2b-sendmail-reject[ \t]' -- stderr: ''
2017-09-08 14:10:37,769 fail2ban.action [1879]: ERROR iptables
-n -L INPUT | grep -q 'f2b-sendmail-reject[ \t]' -- returned 1
2017-09-08 14:10:37,769 fail2ban.CommandAction [1879]: ERROR
Invariant check failed. Trying to restore a sane environment
2017-09-08 14:10:37,873 fail2ban.action [1879]: ERROR iptables
-D INPUT -p tcp -m multiport --dports smtp,465,submission -j
f2b-sendmail-reject
iptables -F f2b-sendmail-reject
iptables -X f2b-sendmail-reject -- stdout: ''
2017-09-08 14:10:37,873 fail2ban.action [1879]: ERROR iptables
-D INPUT -p tcp -m multiport --dports smtp,465,submission -j
f2b-sendmail-reject
iptables -F f2b-sendmail-reject
iptables -X f2b-sendmail-reject -- stderr: "iptables v1.4.7: Couldn't
load target
`f2b-sendmail-reject':/lib/xtables/libipt_f2b-sendmail-reject.so: cannot
open shared object file: No such file or directory\n\nTry `iptables -h'
or 'iptables --help' for more information.\niptables: No
chain/target/match by that name.\niptables: No chain/target/match by
that name.\n"
2017-09-08 14:10:37,873 fail2ban.action [1879]: ERROR iptables
-D INPUT -p tcp -m multiport --dports smtp,465,submission -j
f2b-sendmail-reject
iptables -F f2b-sendmail-reject
iptables -X f2b-sendmail-reject -- returned 1
2017-09-08 14:10:37,874 fail2ban.actions [1879]: ERROR Failed
to execute unban jail 'sendmail-reject' action 'iptables-multiport' info
'{'matches': u'Sep 8 13:55:36 slipknot sendmail[6461]: v88ItZ8Z006461:
ruleset=check_rcpt, arg1=<[email protected]>,
relay=[222.247.246.132], reject=550 5.7.1 <[email protected]>...
Relaying denied. IP name lookup failed [222.247.246.132]Sep 8 13:55:36
slipknot sendmail[6461]: v88ItZ8Z006461: ruleset=check_rcpt,
arg1=<[email protected]>, relay=[222.247.246.132], reject=550 5.7.1
<[email protected]>... Relaying denied. IP name lookup failed
[222.247.246.132]Sep 8 13:55:36 slipknot sendmail[6460]:
v88ItZXY006460: ruleset=check_rcpt, arg1=<[email protected]>,
relay=[222.247.246.132], reject=550 5.7.1 <[email protected]>... Relaying
denied. IP name lookup failed [222.247.246.132]Sep 8 13:55:36 slipknot
sendmail[6462]: v88Itaws006462: ruleset=check_rcpt, arg1=<[email protected]>,
relay=[222.247.246.132], reject=550 5.7.1 <[email protected]>... Relaying
denied. IP name lookup failed [222.247.246.132]', 'ip':
'222.247.246.132', 'time': 1504896937.418926, 'failures': 4}': Error
stopping action
---------------------
ls -l /lib/xtables/libipt_f2b-sendmail-reject.so
ls: cannot access /lib/xtables/libipt_f2b-sendmail-reject.so:
No such file or directory
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Fail2ban-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fail2ban-users