Package: logwatch
Version: 7.7-1
Severity: normal
Dear Maintainer,
*** Reporter, please consider answering these questions, where
appropriate ***
* What led up to the situation?
I think this is fairly normal host, runs ISPConfig though. I have
modified fail2ban somewhat, but I would say just installed Debian 12
and fail2ban.
* What exactly did you do (or not do) that was effective (or
ineffective)?
Did try to debug, could not find fix.
* What was the outcome of this action?
* What outcome did you expect instead?
*** End of the template - remove these template lines ***
On Debian 10 and 11 hosts the e-mail logwatch generates has section
like this:
--------------------- fail2ban-messages Begin ------------------------
Banned services with Fail2Ban: Bans:Unbans
postfix-sasl: [ 3:3 ]
recidive: [ 88:155]
sshd: [296:296]
---------------------- fail2ban-messages End -------------------------
On Debian 12, that section does not appear.
I have compared settings between hosts, I can not see difference. I
tried to see if fail2ban log format has changed, but they look the
same to me. Troubleshooting on the Debian 12 host with
# logwatch --debug High --service fail2ban
shows logfile with the fail2ban info is read and the filter finds Ban,
Unban etc. lines. With --debug High the resulting e-mail did have
fail2ban-messages section, but still not the summary lines with
numbers of Bans:Unbans.
Is this a known issue, some configuration needs adjustment?
My Debian 12 host is NOT upgraded from Debian 11, it is a fresh
install. I did read Debian 12 Release notes, but can not find it
mentioning logwatch or fail2ban.
--
-- System Information:
Debian Release: 12.5
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500,
'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 6.1.0-20-amd64 (SMP w/3 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE
not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages logwatch depends on:
ii perl 5.36.0-7+deb12u1
ii postfix [mail-transport-agent] 3.7.10-0+deb12u1
Versions of packages logwatch recommends:
pn libdate-manip-perl <none>
pn libsys-cpu-perl <none>
pn libsys-meminfo-perl <none>
logwatch suggests no packages.
-- Configuration Files:
/etc/cron.daily/00logwatch changed [not included]
-- no debconf information
