New answers tagged fail2ban
10
votes
Accepted
fail2ban bans IP addresses, yet they still appear in access.log
Docker networking is set up in such a way that it bypasses normal iptables chains. fail2ban uses INPUT chain but to filter docker traffic you need to use its custom DOCKER-USER chain. See the ...
1
vote
fail2ban bans IP addresses, yet they still appear in access.log
Be sure your IP-chains are setup correctly?
Can you check your IP-chain on having a ACCEPT rule before the DROP rules so there is no drop.
I found this issue at https://github.com/fail2ban/fail2ban/...
3
votes
fail2ban bans IP addresses, yet they still appear in access.log
Agreed this is a little odd.
I'm assuming that you know the client connections are coming from these addresses (i.e. you're not running a reverse proxy / webserver config that substitutes the proxy ...
0
votes
Accepted
fail2ban cannot block ip public, it works only for private ip
Similar case and perferctly solved here: link
0
votes
How to Unban an IP properly with Fail2Ban
if you wish to find the IP first, you can do sudo fail2ban-client banned. This will show you the list of jails as well as the IPs inside them. Then you can either do sudo fail2ban-client unban <IP&...
Top 50 recent answers are included
Related Tags
fail2ban × 723iptables × 136
ubuntu × 83
ssh × 74
security × 72
regex × 72
linux × 70
nginx × 68
debian × 45
centos × 37
firewall × 36
apache-2.2 × 29
postfix × 27
brute-force-attacks × 27
firewalld × 24
apache-2.4 × 18
centos7 × 17
ufw × 17
logging × 15
ddos × 15
wordpress × 13
ubuntu-16.04 × 13
apache2 × 12
log-files × 12
dovecot × 11