Running fail2ban 0.8.14 on CentOS 6.5 with Python 2.6.6, fail2ban puts my IP in the banned list, but doesn't actually prevent me from logging in.
Here's an example of a failed ban in /var/log/fail2ban.log (I think?):
ERROR iptables -D fail2ban-SSH -s xxx.xxx.xxx.xxx -j REJECT --reject-with icmp-port-unreachable returned 100
Interestingly, I have this working on two other machines, one of which is CentOS 6.6 and the other is CentOS 6.5, and the jail.conf and jail.local files are identical on both.
I have restarted fail2ban multiple times, added the
Port = <my number> directive to the
jail.local file under
[ssh-iptables], but still no luck.
Again, when running
fail2ban-client status ssh-iptables, the IP shows up in the banned IP list, but I can still log in.
Any ideas what might be causing the problem?
UPDATE: It appears to work intermittently. After about 20 minutes of waiting, it finally prevented my login. So I guess there's just a huge delay?