At 11:48 AM 9/21/2020, Kenneth Porter wrote:
--On Monday, September 21, 2020 12:36 PM -0500 Mike <[email protected]> wrote:

when I dump all the firewall rules it does show those two "manban" IPs,
but I don't see an ipset list or any fail2ban rules in the firewall like
I do on my other servers:

What action do you have configured in jail.local? Here's mine:

banaction = firewallcmd-ipset
# also send mail with ban notification
action = %(action_mwl)s

In my jail.local I only have one banction under a specific jail:

[pam-generic]
enabled=true
banaction = iptables-allports

I assume all the other jails use the default.

Is it possible with the update, the base configuration banaction was changed?

In my /etc/fail2ban/jail.conf under [DEFAULT] I have:

banaction = iptables-multiport
banaction_allports = iptables-allports

I checked my other servers that are working properly and they have the same configuration.

Does the latest f2b no longer support iptables-multiport? which I assume uses ipset?




_______________________________________________
Fail2ban-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fail2ban-users

Reply via email to