Re: [Fail2ban-users] need help creating a freepbx-gui jail

2016-10-20 Thread Anthony Griffiths
e a > few failed attempts? Can you post a snippet? > > I'd also stick with 0.9.x as its set up is slightly different from 0.8.x > (lots more defaulting). > > On 20/10/2016 09:13, Anthony Griffiths wrote: >> something is really wrong here. I uninstalled fail2ban 0.9

[Fail2ban-users] need help creating a freepbx-gui jail

2016-10-19 Thread Anthony Griffiths
I'm running centos 6.8 and I've installed freepbx-13 and fail2ban-0.9.4-2.el6.noarch, which I got from 'yum install fail2ban'. I'm trying to create a jail to block failed login attempts in the freepbx GUI. One accesses the freepbx gui in a browser so it's http/https access. I tried this in jail.loc

[Fail2ban-users] undersatnding fail2ban log entries

2016-04-09 Thread Anthony Griffiths
I'm running fail2ban-0.9.3-1.el6.1 on centos 6 and in the fail2ban log are some entries I'd like to clarify. 1) INFO[apache-noscript] Found 68.60.239.35 does this mean that fail2ban is simply aware of one attempt by 68.60.239.35? or should it be banning it? 2) [apache-fakegooglebot] Ignore 66

[Fail2ban-users] Unable to find a corresponding IP address for ::1: [Errno -9]

2016-03-24 Thread Anthony Griffiths
I'm running centos 6.7 64 bit and fail2ban-0.8.14-1.shmz65.1.128.noarch which I got from 'yum install fail2ban'. The problem is I'm getting a lot of strange entries in my logwatch file every day concerning fail2ban. Here's an example of what I get every day in the logwatch: The first bit about bann

[Fail2ban-users] fail2ban not banning anything

2015-10-02 Thread Anthony Griffiths
I'm running centos 6 and I've just installed fail2ban-0.9.2-1.el6.noarch using yum. I notice straight away the jail.conf file looks different and I can't get fail2ban to ban anything. After trawling google I can't find an up-to-date working sample jail.local file as a reference. The program starts

[Fail2ban-users] inban a whole jail

2015-05-21 Thread Anthony Griffiths
I know one can unban an ip with the command: 'fail2ban-client set unbanip ' but is there a command that will unban all the ip's in a particular jail? I did see this command 'set action actionunban ' on a google search but if it's the right command I don't understand what I should put in place o

[Fail2ban-users] need help with custom filter

2015-05-17 Thread Anthony Griffiths
I'm running fail2ban-0.8.14-1.el6. on centos 6.6 hi can some clever bod please help me debug a custom filter? the application is red5 media server and what I need is quite straightforward but I can't get past some errors. There's only one expression in the log file I want to watch for and that's t

[Fail2ban-users] apache-nohome filter not working

2015-03-29 Thread Anthony Griffiths
I'm running fail2ban-0.8.14-1.el6.noarch on centos 6.6 64bit. apache-nohome does not recognise the 'File does not exist' entries littered throughout my *error_log and is not banning the offending ip's. This is a typical line from my httpd error log: [Fri Mar 27 16:16:35 2015] [error] [client 78.18

[Fail2ban-users] correct filter for openvpn

2015-03-18 Thread Anthony Griffiths
I'm running centos 5.10 32 bit server with fail2ban-0.8.14-1.el5 and openvpn-2.3.2-2.el5 and I'm having difficulty getting a filter to work in fail2ban. I saw the example filter at http://www.fail2ban.org/wiki/index.php/OpenVPN but it doesn't work for me, maybe I'm using the wrong versions(s). thi

Re: [Fail2ban-users] fail2ban fails to stop asterisk hack

2015-03-18 Thread Anthony Griffiths
On Wed, Mar 18, 2015 at 1:11 AM, Lee Clemens wrote: > On 03/16/2015 03:21 PM, Anthony Griffiths wrote: >> > If is your server and not the host fail2ban should > block, the regex seems incorrect and should be fixed. > > Instead, it seems the regex should check for the &quo

[Fail2ban-users] fail2ban fails to stop asterisk hack

2015-03-16 Thread Anthony Griffiths
I'm running centos 5.10 32 bit server with fail2ban-0.8.14-1.el5 and Asterisk 10.7.0. some p-o-s is constantly trying to hack (my) asterisk and /var/log/asterisk/messages is littered with entries like this every minute or so: [2015-03-16 18:46:34] NOTICE[3453] chan_sip.c: hacking attempt detected

[Fail2ban-users] Error in FilterPyinotify callback: _strptime_time

2015-02-12 Thread Anthony Griffiths
I'm running centos 6 server (command line only) with fail2ban-0.8.14-1.el6.noarch. This error keeps coming up in my fail2ban log after all the jails have started: "fail2ban.filter []: ERROR Error in FilterPyinotify callback: _strptime_time" I haven't got a clue how to fix this and I see this

[Fail2ban-users] upgrade to fail2ban-0.8.10 no protection for sendmail

2015-02-01 Thread Anthony Griffiths
I used fail2ban for ages on centos 5 and it was great but ever since the upgrade to fail2ban-0.8.10 the program seems to have no protection for sendmail, even after searching google for jail.local examples.What I used to have in (previous) jail.conf was: [sendmail] enabled = true filter = send