New answers tagged

1 vote

How to find and edit the file for fail2ban to change the email address it's using to send banned IPs to

Fail2Ban typically stores its configuration files in the /etc/fail2ban directory. Within this directory, you'll find various configuration files. The main configuration file is usually named jail.conf ...
user149264's user avatar
1 vote

fail2ban for dovecot not working

The logpath directive should point to the actual log file, not just a directory. You can use wildcards contain * or ?, but fail2ban will only generate the list of matching files on startup. You also ...
jpiddle888's user avatar
11 votes
Accepted

fail2ban bans IP addresses, yet they still appear in access.log

Docker networking is set up in such a way that it bypasses normal iptables chains. fail2ban uses INPUT chain but to filter docker traffic you need to use its custom DOCKER-USER chain. See the ...
AlexD's user avatar
  • 10.3k
2 votes

fail2ban bans IP addresses, yet they still appear in access.log

Be sure your IP-chains are set up correctly? Can you check your IP-chain on having an ACCEPT rule before the DROP rules, so there is no drop? I found this issue at https://github.com/fail2ban/fail2ban/...
Martie's user avatar
  • 19
3 votes

fail2ban bans IP addresses, yet they still appear in access.log

Agreed this is a little odd. I'm assuming that you know the client connections are coming from these addresses (i.e. you're not running a reverse proxy / webserver config that substitutes the proxy ...
symcbean's user avatar
  • 22.4k

Top 50 recent answers are included