You may send me the conf files directly to me. I need to know your OS and version.
Currently running it for ssh, pop3, proftp on Centos 5 But will be away for the weekend so you wont get any answers from before monday. > I too am getting similar errors and it has never worked for my qmail > installation. It works for Proftpd and ssh just fine. Although in this > snippet it shows a ProFTPD error too. Little or no info out there to > resolve this. > > 2009-10-30 09:01:02,004 fail2ban.actions.action: ERROR iptables -N > fail2ban-pop3 > iptables -A fail2ban-pop3 -j RETURN > iptables -I INPUT -p tcp --dport pop3 -j fail2ban-pop3 returned 200 > 2009-10-30 09:01:02,126 fail2ban.actions.action: ERROR iptables -N > fail2ban-QMAIL > iptables -A fail2ban-QMAIL -j RETURN > iptables -I INPUT -p tcp --dport smtp -j fail2ban-QMAIL returned 200 > 2009-10-30 09:01:02,298 fail2ban.actions.action: ERROR iptables -N > fail2ban-ProFTPD > iptables -A fail2ban-ProFTPD -j RETURN > iptables -I INPUT -p tcp --dport ftp -j fail2ban-ProFTPD returned 100 > > > Ole N.Johansen wrote: >> >> I think i need to see your conf files for fail2ban. >> >> You may send it directly to my email address. >> >> >> >> ------------------------------------------------------------------------ >> >> *From:* Vidyadhar [mailto:vidyadha...@gmail.com] >> *Sent:* 30. oktober 2009 12:28 >> *To:* qmailtoaster-list@qmailtoaster.com >> *Subject:* Re: [qmailtoaster] fail2ban query >> >> >> >> Hi >> >> OS : CentOS:5.3 >> Enabled log of fail2ban. >> >> 2009-10-18 04:02:07,988 fail2ban.filter : INFO Log rotation detected >> for >> >> >> >> /var/log/maillog >> >> 2009-10-18 04:02:07,990 fail2ban.filter : INFO Log rotation detected >> for >> >> /var/log/maillog >> >> 2009-10-18 04:04:09,985 fail2ban.filter : INFO Log rotation detected >> for >> >> /var/log/maillog >> >> 2009-10-18 04:04:09,987 fail2ban.filter : INFO Log rotation detected >> for >> >> >> >> /var/log/maillog >> >> 2009-10-19 07:17:03,728 fail2ban.actions: WARNING [vpopmail] Ban >> >> 41.219.219.61 >> >> 2009-10-19 07:17:03,732 fail2ban.actions.action: ERROR iptables -n -L >> >> INPUT | grep -q fail2ban-pop3 returned 100 >> >> >> >> 2009-10-19 07:17:03,732 fail2ban.actions.action: ERROR Invariant check >> >> failed. Trying to restore a sane environment >> >> 2009-10-19 07:17:03,743 fail2ban.actions.action: ERROR iptables -N >> >> fail2ban-pop3 >> >> iptables -A fail2ban-pop3 -j RETURN >> >> >> >> iptables -I INPUT -p tcp] sendmailwhois[name --dport pop3 -j >> fail2ban-pop3 >> >> returned 200 >> >> 2009-10-19 07:17:03,748 fail2ban.actions.action: ERROR iptables -n -L >> >> INPUT | grep -q fail2ban-pop3 returned 100 >> >> 2009-10-19 07:17:03,748 fail2ban.actions.action: CRITICAL Unable to >> >> >> >> restore environment >> >> 2009-10-19 07:17:04,749 fail2ban.actions: WARNING [vpopmail] >> 41.219.219.61 >> >> already banned >> >> 2009-10-19 07:17:05,749 fail2ban.actions: WARNING [vpopmail] >> 41.219.219.61 >> >> already banned >> >> 2009-10-20 09:47:18,938 fail2ban.comm : WARNING Invalid command: >> >> >> >> ['restart'] >> >> 2009-10-20 09:47:24,053 fail2ban.jail : INFO Jail 'qmail-iptables' >> >> stopped >> >> 2009-10-20 09:47:25,035 fail2ban.actions: WARNING [vpopmail] Unban >> >> 41.219.219.61 >> >> 2009-10-20 09:47:25,039 fail2ban.actions.action: ERROR iptables -n -L >> >> >> >> INPUT | grep -q fail2ban-pop3 returned 100 >> >> 2009-10-20 09:47:25,039 fail2ban.actions.action: ERROR Invariant check >> >> failed. Trying to restore a sane environment >> >> 2009-10-20 09:47:25,048 fail2ban.actions.action: ERROR iptables -N >> >> >> >> fail2ban-pop3 >> >> iptables -A fail2ban-pop3 -j RETURN >> >> iptables -I INPUT -p tcp] sendmailwhois[name --dport pop3 -j >> fail2ban-pop3 >> >> returned 200 >> >> 2009-10-20 09:47:25,052 fail2ban.actions.action: ERROR iptables -n -L >> >> >> >> INPUT | grep -q fail2ban-pop3 returned 100 >> >> >> >> When i checked the entries in iptables it was not showing the >> >> 41.219.219.61 ip >> >> >> >> Regards, >> >> Vidyadhar >> >> >> >> On Fri, Oct 30, 2009 at 4:35 PM, Ole N.Johansen >> <ole.johan...@cryonix.no <mailto:ole.johan...@cryonix.no>> wrote: >> >> Hello, >> >> >> >> Works like a dream here. >> >> >> >> What is your OS, version >> >> Error messages? >> >> >> >> B/R >> >> Ole J >> >> >> >> ------------------------------------------------------------------------ >> >> *From:* Vidyadhar [mailto:vidyadha...@gmail.com >> <mailto:vidyadha...@gmail.com>] >> *Sent:* 30. oktober 2009 11:41 >> *To:* qmailtoaster-list@qmailtoaster.com >> <mailto:qmailtoaster-list@qmailtoaster.com> >> *Subject:* [qmailtoaster] fail2ban query >> >> >> >> Hi list, >> >> Do anybody here have successfully implemented fail2ban for vpopmail. I >> tried by following this way: >> http://www.mail-archive.com/qmailtoaster-list@qmailtoaster.com/msg23954.html >> but not working. Can anybody help me out to resolve the same. >> >> Regards, >> Vidyadhar >> >> >> > > -- > Cecil Yother, Jr. "cj" > cj's > 2318 Clement Ave > Alameda, CA 94501 > > tel 510.865.2787 | fax 510.864.7300 > http://yother.com > > > --------------------------------------------------------------------------------- > Qmailtoaster is sponsored by Vickers Consulting Group > (www.vickersconsulting.com) > Vickers Consulting Group offers Qmailtoaster support and > installations. > If you need professional help with your setup, contact them today! > --------------------------------------------------------------------------------- > Please visit qmailtoaster.com for the latest news, updates, and > packages. > > To unsubscribe, e-mail: > qmailtoaster-list-unsubscr...@qmailtoaster.com > For additional commands, e-mail: > qmailtoaster-list-h...@qmailtoaster.com > > > --------------------------------------------------------------------------------- Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! --------------------------------------------------------------------------------- Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
