Topic: fail2ban not working
==== Required information ====
- iRedMail version (check /etc/iredmail-release): iRedMail-0.9.2
- Linux/BSD distribution name and version: Ubuntu 14004 LTS
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx): Apache
- Manage mail accounts with iRedAdmin-Pro? No (free version)
- Related log if you're reporting an issue:
====
Hi,
fail2ban not working with any of the service (roundcube, SSH etc.) in my iRedmail installation. when i issue command "iptables -n -L INPUT | grep -q fail2ban-ssh" it returns empty screen. My jail.local is as below: Kindly help to fix this issue. Thanks in advance.
# Refer to /etc/fail2ban/jail.conf for more examples.
[DEFAULT]
# time is in seconds. 3600 = 1 hour, 86400 = 24 hours (1 day)
findtime = 3600
bantime = 86400
maxretry = 3
ignoreip = 127.0.0.1 127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16
[sshd]
enabled = true
filter = sshd
action = iptables-allports
logpath = /var/log/auth.log
[sshd-ddos]
enabled = true
filter = sshd-ddos
action = iptables-allports
logpath = /var/log/auth.log
[roundcube-iredmail]
enabled = true
filter = roundcube.iredmail
action = iptables-multiport[name=roundcube, port="http,https,smtp,submission,pop3,pop3s,imap,imaps,sieve", protocol=tcp]
logpath = /var/log/mail.log
findtime = 3600
[dovecot-iredmail]
enabled = true
filter = dovecot.iredmail
action = iptables-multiport[name=dovecot, port="http,https,smtp,submission,pop3,pop3s,imap,imaps,sieve", protocol=tcp]
logpath = /var/log/dovecot.log
[postfix-iredmail]
enabled = true
filter = postfix.iredmail
action = iptables-multiport[name=postfix, port="http,https,smtp,submission,pop3,pop3s,imap,imaps,sieve", protocol=tcp]
# sendmail[name=Postfix, dest=root, sender=fail2ban@localhost]
logpath = /var/log/mail.log
[sogo-iredmail]
enabled = false
filter = sogo-auth
action = iptables-multiport[name=SOGo, port="http,https,smtp,submission,pop3,pop3s,imap,imaps,sieve", protocol=tcp]
logpath = /var/log/sogo/sogo.log
[apache]
enabled = true
filter = apache-auth
action = iptables-multiport[name=roundcube-fail, port="http,https,smtp,submission,pop3,pop3s,imap,imaps,sieve", protocol=tcp]
logpath = /var/log/apache2/error.log
----
Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.