Fail2ban doesn't start

NethServer Version: v7
Module: Fail2ban

I have just installed the nethserver-fail2ban module.
But it doesn’t start. I tried to start the service from the server manager but it doesn’t start…
The command # fail2ban-client status produces

WARNING 'socket' not defined in 'Definition'. Using default one: '/var/run/fail2ban/fail2ban.sock'
WARNING 'pidfile' not defined in 'Definition'. Using default one: '/var/run/fail2ban/fail2ban.pid'
ERROR  Failed to access socket path: /var/run/fail2ban/fail2ban.sock. Is fail2ban running?

When I created an file “fail2ban.sock” manually in that folder the last line changes to
ERROR Unable to contact server. Is it running?

The installation however seems to be all right… When I type config show fail2ban all jails are listed and I have also access to the GUI… but when I change something in the GUI it shows me an error message


However the changes are applied nevertheless…

It only does not start…
Any ideas?

Do you see any related error in /var/log/messages, or in the output of:

systemctl -l status fail2ban
journalctl -xu fail2ban
fail2ban-client -vvv start

Can you provide also the output of ls -la /var/run/fail2ban/ ?

Answer please the questions of @dnutan and also what is the ouput of

signal-event nethserver-fail2ban-save

go to /var/log/message to see what is occurring for the event nethserver-fail2ban-save

Just installed right now on a NS7 stable, seems good for me

Thanks for the quick answers!!!
In the /var/log/messages, I found Feb 8 20:20:46 cpb17 systemd: Started Time & Date Service. Feb 8 20:20:46 cpb17 esmith::event[24024]: Event: nethserver-fail2ban-save Feb 8 20:20:46 cpb17 esmith::event[24024]: expanding /etc/sudoers Feb 8 20:20:46 cpb17 esmith::event[24024]: expanding /etc/fail2ban/fail2ban.local Feb 8 20:20:46 cpb17 esmith::event[24024]: expanding /etc/fail2ban/jail.local Feb 8 20:20:46 cpb17 esmith::event[24024]: expanding /etc/fail2ban/action.d/shorewall.local Feb 8 20:20:46 cpb17 esmith::event[24024]: expanding /etc/fail2ban/filter.d/urbackup-auth.conf Feb 8 20:20:46 cpb17 esmith::event[24024]: Action: /etc/e-smith/events/actions/generic_template_expand SUCCESS [0.160696] Feb 8 20:20:46 cpb17 systemd: Reloading. Feb 8 20:20:46 cpb17 systemd: [/usr/lib/systemd/system/microcode.service:10] Trailing garbage, ignoring. Feb 8 20:20:46 cpb17 systemd: microcode.service lacks both ExecStart= and ExecStop= setting. Refusing. Feb 8 20:20:46 cpb17 systemd: Cannot add dependency job for unit microcode.service, ignoring: Unit is not loaded properly: Invalid argument. Feb 8 20:20:46 cpb17 systemd: Starting Fail2Ban Service... Feb 8 20:20:46 cpb17 fail2ban-client: WARNING 'socket' not defined in 'Definition'. Using default one: '/var/run/fail2ban/fail2ban.sock' Feb 8 20:20:46 cpb17 fail2ban-client: WARNING 'pidfile' not defined in 'Definition'. Using default one: '/var/run/fail2ban/fail2ban.pid' Feb 8 20:20:46 cpb17 fail2ban-client: WARNING 'syslogsocket' not defined in 'Definition'. Using default one: 'auto' Feb 8 20:20:46 cpb17 fail2ban-client: WARNING 'dbfile' not defined in 'Definition'. Using default one: '/var/lib/fail2ban/fail2ban.sqlite3' Feb 8 20:20:46 cpb17 fail2ban-client: WARNING 'filter' not defined in 'httpd-admin'. Using default one: '' Feb 8 20:20:46 cpb17 fail2ban-client: WARNING No filter set for jail httpd-admin Feb 8 20:20:46 cpb17 fail2ban-client: WARNING 'backend' not defined in 'httpd-admin'. Using default one: 'auto' Feb 8 20:20:46 cpb17 fail2ban-client: WARNING 'filter' not defined in 'httpd-admin'. Using default one: '' Feb 8 20:20:46 cpb17 fail2ban-client: ERROR Failed during configuration: Bad value substitution: Feb 8 20:20:46 cpb17 fail2ban-client: section: [httpd-admin] Feb 8 20:20:46 cpb17 fail2ban-client: option : action Feb 8 20:20:46 cpb17 fail2ban-client: key : action_mw Feb 8 20:20:46 cpb17 fail2ban-client: rawval : Feb 8 20:20:46 cpb17 systemd: fail2ban.service: control process exited, code=exited status=255 Feb 8 20:20:46 cpb17 systemd: Failed to start Fail2Ban Service. Feb 8 20:20:46 cpb17 systemd: Unit fail2ban.service entered failed state. Feb 8 20:20:46 cpb17 systemd: fail2ban.service failed. Feb 8 20:20:46 cpb17 esmith::event[24024]: Job for fail2ban.service failed because the control process exited with error code. See "systemctl status fail2ban.service" and "journalctl -xe" for details. Feb 8 20:20:46 cpb17 esmith::event[24024]: [INFO] service fail2ban restart Feb 8 20:20:46 cpb17 systemd: Cannot add dependency job for unit microcode.service, ignoring: Unit is not loaded properly: Invalid argument. Feb 8 20:20:47 cpb17 systemd: Starting Fail2Ban Service... Feb 8 20:20:47 cpb17 fail2ban-client: WARNING 'socket' not defined in 'Definition'. Using default one: '/var/run/fail2ban/fail2ban.sock' Feb 8 20:20:47 cpb17 fail2ban-client: WARNING 'pidfile' not defined in 'Definition'. Using default one: '/var/run/fail2ban/fail2ban.pid' Feb 8 20:20:47 cpb17 fail2ban-client: WARNING 'syslogsocket' not defined in 'Definition'. Using default one: 'auto' Feb 8 20:20:47 cpb17 fail2ban-client: WARNING 'dbfile' not defined in 'Definition'. Using default one: '/var/lib/fail2ban/fail2ban.sqlite3' Feb 8 20:20:47 cpb17 fail2ban-client: WARNING 'filter' not defined in 'httpd-admin'. Using default one: '' Feb 8 20:20:47 cpb17 fail2ban-client: WARNING No filter set for jail httpd-admin Feb 8 20:20:47 cpb17 fail2ban-client: WARNING 'backend' not defined in 'httpd-admin'. Using default one: 'auto' Feb 8 20:20:47 cpb17 fail2ban-client: WARNING 'filter' not defined in 'httpd-admin'. Using default one: '' Feb 8 20:20:47 cpb17 fail2ban-client: ERROR Failed during configuration: Bad value substitution: Feb 8 20:20:47 cpb17 fail2ban-client: section: [httpd-admin] Feb 8 20:20:47 cpb17 fail2ban-client: option : action Feb 8 20:20:47 cpb17 fail2ban-client: key : action_mw Feb 8 20:20:47 cpb17 fail2ban-client: rawval : Feb 8 20:20:47 cpb17 systemd: fail2ban.service: control process exited, code=exited status=255 Feb 8 20:20:47 cpb17 systemd: Failed to start Fail2Ban Service. Feb 8 20:20:47 cpb17 systemd: Unit fail2ban.service entered failed state. Feb 8 20:20:47 cpb17 systemd: fail2ban.service failed. Feb 8 20:20:47 cpb17 esmith::event[24024]: Job for fail2ban.service failed because the control process exited with error code. See "systemctl status fail2ban.service" and "journalctl -xe" for details. Feb 8 20:20:47 cpb17 esmith::event[24024]: [WARNING] restart service fail2ban failed! Feb 8 20:20:47 cpb17 esmith::event[24024]: Action: /etc/e-smith/events/actions/adjust-services FAILED: 1 [0.190538] Feb 8 20:20:47 cpb17 esmith::event[24024]: Event: nethserver-fail2ban-save FAILED Feb 8 20:20:47 cpb17 httpd: [ERROR] Nethgui\System\NethPlatform: process on queuepost-processexited with code 1: /usr/libexec/nethserver/ptrack -j -s '/var/run/ptrack/9b766d17a9aa18dab30880110096b2b1.sock' -d '/var/spool/ptrack/8c75510bdde1c07b.dump' -- /usr/bin/sudo -n /sbin/e-smith/signal-event 'nethserver-fail2ban-save' Feb 8 20:20:47 cpb17 systemd: fail2ban.service holdoff time over, scheduling restart. Feb 8 20:20:47 cpb17 systemd: Cannot add dependency job for unit microcode.service, ignoring: Unit is not loaded properly: Invalid argument. Feb 8 20:20:47 cpb17 systemd: Starting Fail2Ban Service... Feb 8 20:20:47 cpb17 fail2ban-client: WARNING 'socket' not defined in 'Definition'. Using default one: '/var/run/fail2ban/fail2ban.sock' Feb 8 20:20:47 cpb17 fail2ban-client: WARNING 'pidfile' not defined in 'Definition'. Using default one: '/var/run/fail2ban/fail2ban.pid' Feb 8 20:20:47 cpb17 fail2ban-client: WARNING 'syslogsocket' not defined in 'Definition'. Using default one: 'auto' Feb 8 20:20:47 cpb17 fail2ban-client: WARNING 'dbfile' not defined in 'Definition'. Using default one: '/var/lib/fail2ban/fail2ban.sqlite3' Feb 8 20:20:47 cpb17 fail2ban-client: WARNING 'filter' not defined in 'httpd-admin'. Using default one: '' Feb 8 20:20:47 cpb17 fail2ban-client: WARNING No filter set for jail httpd-admin Feb 8 20:20:47 cpb17 fail2ban-client: WARNING 'backend' not defined in 'httpd-admin'. Using default one: 'auto' Feb 8 20:20:47 cpb17 fail2ban-client: WARNING 'filter' not defined in 'httpd-admin'. Using default one: '' Feb 8 20:20:47 cpb17 fail2ban-client: ERROR Failed during configuration: Bad value substitution: Feb 8 20:20:47 cpb17 fail2ban-client: section: [httpd-admin] Feb 8 20:20:47 cpb17 fail2ban-client: option : action Feb 8 20:20:47 cpb17 fail2ban-client: key : action_mw Feb 8 20:20:47 cpb17 fail2ban-client: rawval : Feb 8 20:20:47 cpb17 systemd: fail2ban.service: control process exited, code=exited status=255 Feb 8 20:20:47 cpb17 systemd: Failed to start Fail2Ban Service. Feb 8 20:20:47 cpb17 systemd: Unit fail2ban.service entered failed state. Feb 8 20:20:47 cpb17 systemd: fail2ban.service failed. Feb 8 20:20:47 cpb17 systemd: fail2ban.service holdoff time over, scheduling restart. Feb 8 20:20:47 cpb17 systemd: Cannot add dependency job for unit microcode.service, ignoring: Unit is not loaded properly: Invalid argument. Feb 8 20:20:47 cpb17 systemd: Starting Fail2Ban Service... Feb 8 20:20:47 cpb17 fail2ban-client: WARNING 'socket' not defined in 'Definition'. Using default one: '/var/run/fail2ban/fail2ban.sock' Feb 8 20:20:47 cpb17 fail2ban-client: WARNING 'pidfile' not defined in 'Definition'. Using default one: '/var/run/fail2ban/fail2ban.pid' Feb 8 20:20:47 cpb17 fail2ban-client: WARNING 'syslogsocket' not defined in 'Definition'. Using default one: 'auto' Feb 8 20:20:47 cpb17 fail2ban-client: WARNING 'dbfile' not defined in 'Definition'. Using default one: '/var/lib/fail2ban/fail2ban.sqlite3' Feb 8 20:20:47 cpb17 fail2ban-client: WARNING 'filter' not defined in 'httpd-admin'. Using default one: '' Feb 8 20:20:47 cpb17 fail2ban-client: WARNING No filter set for jail httpd-admin Feb 8 20:20:47 cpb17 fail2ban-client: WARNING 'backend' not defined in 'httpd-admin'. Using default one: 'auto' Feb 8 20:20:47 cpb17 fail2ban-client: WARNING 'filter' not defined in 'httpd-admin'. Using default one: '' Feb 8 20:20:47 cpb17 fail2ban-client: ERROR Failed during configuration: Bad value substitution: Feb 8 20:20:47 cpb17 fail2ban-client: section: [httpd-admin] Feb 8 20:20:47 cpb17 fail2ban-client: option : action Feb 8 20:20:47 cpb17 fail2ban-client: key : action_mw Feb 8 20:20:47 cpb17 fail2ban-client: rawval : Feb 8 20:20:47 cpb17 systemd: fail2ban.service: control process exited, code=exited status=255 Feb 8 20:20:47 cpb17 systemd: Failed to start Fail2Ban Service. Feb 8 20:20:47 cpb17 systemd: Unit fail2ban.service entered failed state. Feb 8 20:20:47 cpb17 systemd: fail2ban.service failed. Feb 8 20:20:47 cpb17 systemd: fail2ban.service holdoff time over, scheduling restart. Feb 8 20:20:47 cpb17 systemd: Cannot add dependency job for unit microcode.service, ignoring: Unit is not loaded properly: Invalid argument. Feb 8 20:20:47 cpb17 systemd: Starting Fail2Ban Service... Feb 8 20:20:47 cpb17 fail2ban-client: WARNING 'socket' not defined in 'Definition'. Using default one: '/var/run/fail2ban/fail2ban.sock' Feb 8 20:20:47 cpb17 fail2ban-client: WARNING 'pidfile' not defined in 'Definition'. Using default one: '/var/run/fail2ban/fail2ban.pid' Feb 8 20:20:47 cpb17 fail2ban-client: WARNING 'syslogsocket' not defined in 'Definition'. Using default one: 'auto' Feb 8 20:20:47 cpb17 fail2ban-client: WARNING 'dbfile' not defined in 'Definition'. Using default one: '/var/lib/fail2ban/fail2ban.sqlite3' Feb 8 20:20:47 cpb17 fail2ban-client: WARNING 'filter' not defined in 'httpd-admin'. Using default one: '' Feb 8 20:20:47 cpb17 fail2ban-client: WARNING No filter set for jail httpd-admin Feb 8 20:20:47 cpb17 fail2ban-client: WARNING 'backend' not defined in 'httpd-admin'. Using default one: 'auto' Feb 8 20:20:47 cpb17 fail2ban-client: WARNING 'filter' not defined in 'httpd-admin'. Using default one: '' Feb 8 20:20:47 cpb17 fail2ban-client: ERROR Failed during configuration: Bad value substitution: Feb 8 20:20:47 cpb17 fail2ban-client: section: [httpd-admin] Feb 8 20:20:47 cpb17 fail2ban-client: option : action Feb 8 20:20:47 cpb17 fail2ban-client: key : action_mw Feb 8 20:20:47 cpb17 fail2ban-client: rawval : Feb 8 20:20:47 cpb17 systemd: fail2ban.service: control process exited, code=exited status=255 Feb 8 20:20:47 cpb17 systemd: Failed to start Fail2Ban Service. Feb 8 20:20:47 cpb17 systemd: Unit fail2ban.service entered failed state. Feb 8 20:20:47 cpb17 systemd: fail2ban.service failed. Feb 8 20:20:47 cpb17 systemd: fail2ban.service holdoff time over, scheduling restart. Feb 8 20:20:47 cpb17 systemd: Cannot add dependency job for unit microcode.service, ignoring: Unit is not loaded properly: Invalid argument. Feb 8 20:20:47 cpb17 systemd: start request repeated too quickly for fail2ban.service Feb 8 20:20:47 cpb17 systemd: Failed to start Fail2Ban Service. Feb 8 20:20:47 cpb17 systemd: Unit fail2ban.service entered failed state. Feb 8 20:20:47 cpb17 systemd: fail2ban.service failed. Feb 8 20:23:00 cpb17 clamd: SelfCheck: Database status OK.

When I type systemctl -l status fail2ban I receive

[code]fail2ban.service - Fail2Ban Service
Loaded: loaded (/usr/lib/systemd/system/fail2ban.service; enabled; vendor preset: disabled)
Active: failed (Result: start-limit) since Wed 2017-02-08 20:20:47 CET; 2h 49min ago
Docs: man:fail2ban(1)
Process: 24058 ExecStart=/usr/bin/fail2ban-client -x start (code=exited, status=255)
Main PID: 3046 (code=exited, status=0/SUCCESS)

Feb 08 20:20:47 cpb17.cpbanq.com systemd[1]: Failed to start Fail2Ban Service.
Feb 08 20:20:47 cpb17.cpbanq.com systemd[1]: Unit fail2ban.service entered failed state.
Feb 08 20:20:47 cpb17.cpbanq.com systemd[1]: fail2ban.service failed.
Feb 08 20:20:47 cpb17.cpbanq.com systemd[1]: fail2ban.service holdoff time over, scheduling restart.
Feb 08 20:20:47 cpb17.cpbanq.com systemd[1]: start request repeated too quickly for fail2ban.service
Feb 08 20:20:47 cpb17.cpbanq.com systemd[1]: Failed to start Fail2Ban Service.
Feb 08 20:20:47 cpb17.cpbanq.com systemd[1]: Unit fail2ban.service entered failed state.
Feb 08 20:20:47 cpb17.cpbanq.com systemd[1]: fail2ban.service failed[/code]

After journalctl -xu fail2ban:

Feb 08 20:20:47 cpb17.cpbanq.com systemd[1]: Failed to start Fail
-- Logs begin at Mon 2017-02-06 02:12:56 CET, end at Wed 2017-02-08 23:16:42 CET. --
Feb 06 01:15:21 cpb17.cpbanq.com systemd[1]: Starting Fail2Ban Service...
-- Subject: Unit fail2ban.service has begun start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit fail2ban.service has begun starting up.
Feb 06 01:15:22 cpb17.cpbanq.com fail2ban-client[2901]: 2017-02-06 01:15:22,501 fail2ban.server         [2933]: INFO    Starting Fail2ban v0.9.5
Feb 06 01:15:22 cpb17.cpbanq.com fail2ban-client[2901]: 2017-02-06 01:15:22,501 fail2ban.server         [2933]: INFO    Starting in daemon mode
Feb 06 01:15:23 cpb17.cpbanq.com systemd[1]: Started Fail2Ban Service.
-- Subject: Unit fail2ban.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit fail2ban.service has finished starting up.
--
-- The start-up result is done.
Feb 06 13:02:24 cpb17.cpbanq.com systemd[1]: Stopping Fail2Ban Service...
-- Subject: Unit fail2ban.service has begun shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-
-- Logs begin at Mon 2017-02-06 02:12:56 CET, end at Wed 2017-02-08 23:16:42 CET. --
Feb 06 01:15:21 cpb17.cpbanq.com systemd[1]: Starting Fail2Ban Service...
-- Subject: Unit fail2ban.service has begun start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit fail2ban.service has begun starting up.
Feb 06 01:15:22 cpb17.cpbanq.com fail2ban-client[2901]: 2017-02-06 01:15:22,501 fail2ban.server         [2933]: INFO    Starting Fail2ban v0.9.5
Feb 06 01:15:22 cpb17.cpbanq.com fail2ban-client[2901]: 2017-02-06 01:15:22,501 fail2ban.server         [2933]: INFO    Starting in daemon mode
Feb 06 01:15:23 cpb17.cpbanq.com systemd[1]: Started Fail2Ban Service.
-- Subject: Unit fail2ban.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit fail2ban.service has finished starting up.
--
-- The start-up result is done.
Feb 06 13:02:24 cpb17.cpbanq.com systemd[1]: Stopping Fail2Ban Service...
-- Subject: Unit fail2ban.service has begun shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit fail2ban.service has begun shutting down.
Feb 06 13:02:28 cpb17.cpbanq.com fail2ban-client[8038]: Shutdown successful
Feb 06 13:02:28 cpb17.cpbanq.com systemd[1]: Stopped Fail2Ban Service.
-- Subject: Unit fail2ban.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit fail2ban.service has finished shutting down.
Feb 07 01:05:06 cpb17.cpbanq.com systemd[1]: Starting Fail2Ban Service...
-- Subject: Unit fail2ban.service has begun start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit fail2ban.service has begun starting up.
Feb 07 01:05:07 cpb17.cpbanq.com fail2ban-client[1042]: ERROR  Failed during configuration: File contains parsing errors: /etc/fail2ban/jail.loca
Feb 07 01:05:07 cpb17.cpbanq.com fail2ban-client[1042]: [line 759]: 'syslog\r\n'
Feb 07 01:05:07 cpb17.cpbanq.com systemd[1]: fail2ban.service: control process exited, code=exited status=255
Feb 07 01:05:07 cpb17.cpbanq.com systemd[1]: Failed to start Fail2Ban Service.
-- Subject: Unit fail2ban.service has failed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit fail2ban.service has failed.
--
-- The result is failed.
Feb 07 01:05:07 cpb17.cpbanq.com systemd[1]: Unit fail2ban.service entered failed state.
Feb 07 01:05:07 cpb17.cpbanq.com systemd[1]: fail2ban.service failed.
Feb 07 01:05:07 cpb17.cpbanq.com systemd[1]: fail2ban.service holdoff time over, scheduling restart.
lines 1-50
`and so on... `b 08 18:58:51 cpb17.cpbanq.com systemd[1]: Starting Fail2Ban Service...
-- Subject: Unit fail2ban.service has begun start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit fail2ban.service has begun starting up.
Feb 08 18:58:51 cpb17.cpbanq.com fail2ban-client[21383]: WARNING 'socket' not defined in 'Definition'. Using default one: '/var/run/fail2ban/fail
Feb 08 18:58:51 cpb17.cpbanq.com fail2ban-client[21383]: WARNING 'pidfile' not defined in 'Definition'. Using default one: '/var/run/fail2ban/fai
lines 352-401
ct: Unit fail2ban.service has begun start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit fail2ban.service has begun starting up.
Feb 08 18:58:51 cpb17.cpbanq.com fail2ban-client[21383]: WARNING 'socket' not defined in 'Definition'. Using default one: '/var/run/fail2ban/fail
Feb 08 18:58:51 cpb17.cpbanq.com fail2ban-client[21383]: WARNING 'pidfile' not defined in 'Definition'. Using default one: '/var/run/fail2ban/fai
Feb 08 18:58:51 cpb17.cpbanq.com fail2ban-client[21383]: WARNING 'syslogsocket' not defined in 'Definition'. Using default one: 'auto'
Feb 08 18:58:51 cpb17.cpbanq.com fail2ban-client[21383]: WARNING 'dbfile' not defined in 'Definition'. Using default one: '/var/lib/fail2ban/fail
Feb 08 18:58:51 cpb17.cpbanq.com fail2ban-client[21383]: WARNING 'filter' not defined in 'httpd-admin'. Using default one: ''
Feb 08 18:58:51 cpb17.cpbanq.com fail2ban-client[21383]: WARNING No filter set for jail httpd-admin
Feb 08 18:58:51 cpb17.cpbanq.com fail2ban-client[21383]: WARNING 'backend' not defined in 'httpd-admin'. Using default one: 'auto'
Feb 08 18:58:51 cpb17.cpbanq.com fail2ban-client[21383]: WARNING 'filter' not defined in 'httpd-admin'. Using default one: ''
Feb 08 18:58:51 cpb17.cpbanq.com fail2ban-client[21383]: ERROR  Failed during configuration: Bad value substitution:
Feb 08 18:58:51 cpb17.cpbanq.com fail2ban-client[21383]: section: [httpd-admin]
Feb 08 18:58:51 cpb17.cpbanq.com fail2ban-client[21383]: option : action
Feb 08 18:58:51 cpb17.cpbanq.com fail2ban-client[21383]: key    : action_mw
Feb 08 18:58:51 cpb17.cpbanq.com fail2ban-client[21383]: rawval :
Feb 08 18:58:51 cpb17.cpbanq.com systemd[1]: fail2ban.service: control process exited, code=exited status=255
Feb 08 18:58:51 cpb17.cpbanq.com systemd[1]: Failed to start Fail2Ban Service.
-- Subject: Unit fail2ban.service has failed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit fail2ban.service has failed.
--
-- The result is failed.
Feb 08 18:58:51 cpb17.cpbanq.com systemd[1]: Unit fail2ban.service entered failed state.
Feb 08 18:58:51 cpb17.cpbanq.com systemd[1]: fail2ban.service failed.
Feb 08 18:58:52 cpb17.cpbanq.com systemd[1]: fail2ban.service holdoff time over, scheduling restart.
Feb 08 18:58:52 cpb17.cpbanq.com systemd[1]: Starting Fail2Ban Service...
-- Subject: Unit fail2ban.service has begun start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit fail2ban.service has begun starting up.
Feb 08 18:58:52 cpb17.cpbanq.com fail2ban-client[21659]: WARNING 'socket' not defined in 'Definition'. Using default one: '/var/run/fail2ban/fail
Feb 08 18:58:52 cpb17.cpbanq.com fail2ban-client[21659]: WARNING 'pidfile' not defined in 'Definition'. Using default one: '/var/run/fail2ban/fai
Feb 08 18:58:52 cpb17.cpbanq.com fail2ban-client[21659]: WARNING 'syslogsocket' not defined in 'Definition'. Using default one: 'auto'
Feb 08 18:58:52 cpb17.cpbanq.com fail2ban-client[21659]: WARNING 'dbfile' not defined in 'Definition'. Using default one: '/var/lib/fail2ban/fail
Feb 08 18:58:52 cpb17.cpbanq.com fail2ban-client[21659]: WARNING 'filter' not defined in 'httpd-admin'. Using default one: ''
Feb 08 18:58:52 cpb17.cpbanq.com fail2ban-client[21659]: WARNING No filter set for jail httpd-admin
Feb 08 18:58:52 cpb17.cpbanq.com fail2ban-client[21659]: WARNING 'backend' not defined in 'httpd-admin'. Using default one: 'auto'
Feb 08 18:58:52 cpb17.cpbanq.com fail2ban-client[21659]: WARNING 'filter' not defined in 'httpd-admin'. Using default one: ''
Feb 08 18:58:52 cpb17.cpbanq.com fail2ban-client[21659]: ERROR  Failed during configuration: Bad value substitution:
Feb 08 18:58:52 cpb17.cpbanq.com fail2ban-client[21659]: section: [httpd-admin]
Feb 08 18:58:52 cpb17.cpbanq.com fail2ban-client[21659]: option : action
Feb 08 18:58:52 cpb17.cpbanq.com fail2ban-client[21659]: key    : action_mw
Feb 08 18:58:52 cpb17.cpbanq.com fail2ban-client[21659]: rawval :
Feb 08 18:58:52 cpb17.cpbanq.com systemd[1]: fail2ban.service: control process exited, code=exited status=255
Feb 08 18:58:52 cpb17.cpbanq.com systemd[1]: Failed to start Fail2Ban Service.
-- Subject: Unit fail2ban.service has failed
-- Defined-By: systemd
`There is much more output but it is more or less the same repeated... 
After `fail2ban-client -vvv start`:`
INFO   Loading configs for fail2ban under /etc/fail2ban
DEBUG  Reading configs for fail2ban under /etc/fail2ban
DEBUG  Reading config files: /etc/fail2ban/fail2ban.local
INFO     Loading files: ['/etc/fail2ban/fail2ban.local']
Level 7     Reading file: /etc/fail2ban/fail2ban.local
INFO     Loading files: ['/etc/fail2ban/fail2ban.local']
Level 7     Shared file: /etc/fail2ban/fail2ban.local
WARNING 'socket' not defined in 'Definition'. Using default one: '/var/run/fail2ban/fail2ban.sock'
WARNING 'pidfile' not defined in 'Definition'. Using default one: '/var/run/fail2ban/fail2ban.pid'
INFO   Using socket file /var/run/fail2ban/fail2ban.sock
INFO   Loading configs for jail under /etc/fail2ban
DEBUG  Reading configs for jail under /etc/fail2ban
DEBUG  Reading config files: /etc/fail2ban/jail.local
INFO     Loading files: ['/etc/fail2ban/jail.local']
Level 7     Reading file: /etc/fail2ban/jail.local
INFO     Loading files: ['/etc/fail2ban/jail.local']
Level 7     Shared file: /etc/fail2ban/jail.local
WARNING 'syslogsocket' not defined in 'Definition'. Using default one: 'auto'
WARNING 'dbfile' not defined in 'Definition'. Using default one: '/var/lib/fail2ban/fail2ban.sqlite3'
WARNING 'filter' not defined in 'httpd-admin'. Using default one: ''
WARNING No filter set for jail httpd-admin
Level 7 Non essential option 'logencoding' not defined in 'httpd-admin'.
WARNING 'backend' not defined in 'httpd-admin'. Using default one: 'auto'
Level 7 Non essential option 'failregex' not defined in 'httpd-admin'.
Level 7 Non essential option 'ignoreregex' not defined in 'httpd-admin'.
Level 7 Non essential option 'ignorecommand' not defined in 'httpd-admin'.
WARNING 'filter' not defined in 'httpd-admin'. Using default one: ''
ERROR  Failed during configuration: Bad value substitution:
        section: [httpd-admin]
        option : action
        key    : action_mw
        rawval :

The output of ls -la /var/run/fail2ban/ is:

total 0
drwxr-xr-x  2 root root   60 Feb  8 20:06 .
drwxr-xr-x 40 root root 1260 Feb  8 19:15 ..
-rw-r--r--  1 root root    0 Feb  8 20:06 fail2ban.sock

And finally the signal-event nethserver-fail2ban-save yields the following log:`
Feb 8 23:59:28 cpb17 esmith::event[30368]: Event: nethserver-fail2ban-save Feb 8 23:59:28 cpb17 esmith::event[30368]: expanding /etc/sudoers Feb 8 23:59:28 cpb17 dbus[2377]: [system] Activating via systemd: service name=‘org.freedesktop.timedate1’ unit=‘dbus-org.freedesktop.timedate1.service’ Feb 8 23:59:28 cpb17 dbus-daemon: dbus[2377]: [system] Activating via systemd: service name=‘org.freedesktop.timedate1’ unit=‘dbus-org.freedesktop.timedate1.service’ Feb 8 23:59:28 cpb17 systemd: Cannot add dependency job for unit microcode.service, ignoring: Unit is not loaded properly: Invalid argument. Feb 8 23:59:28 cpb17 systemd: Starting Time & Date Service… Feb 8 23:59:28 cpb17 dbus-daemon: dbus[2377]: [system] Successfully activated service ‘org.freedesktop.timedate1’ Feb 8 23:59:28 cpb17 dbus[2377]: [system] Successfully activated service ‘org.freedesktop.timedate1’ Feb 8 23:59:28 cpb17 systemd: Started Time & Date Service. Feb 8 23:59:28 cpb17 esmith::event[30368]: expanding /etc/fail2ban/fail2ban.local Feb 8 23:59:28 cpb17 esmith::event[30368]: expanding /etc/fail2ban/jail.local Feb 8 23:59:28 cpb17 esmith::event[30368]: expanding /etc/fail2ban/action.d/shorewall.local Feb 8 23:59:28 cpb17 esmith::event[30368]: expanding /etc/fail2ban/filter.d/urbackup-auth.conf Feb 8 23:59:28 cpb17 esmith::event[30368]: Action: /etc/e-smith/events/actions/generic_template_expand SUCCESS [0.163037] Feb 8 23:59:28 cpb17 systemd: Reloading. Feb 8 23:59:29 cpb17 systemd: [/usr/lib/systemd/system/microcode.service:10] Trailing garbage, ignoring. Feb 8 23:59:29 cpb17 systemd: microcode.service lacks both ExecStart= and ExecStop= setting. Refusing. Feb 8 23:59:29 cpb17 systemd: Cannot add dependency job for unit microcode.service, ignoring: Unit is not loaded properly: Invalid argument. Feb 8 23:59:29 cpb17 systemd: Starting Fail2Ban Service… Feb 8 23:59:29 cpb17 fail2ban-client: WARNING ‘socket’ not defined in ‘Definition’. Using default one: ‘/var/run/fail2ban/fail2ban.sock’ Feb 8 23:59:29 cpb17 fail2ban-client: WARNING ‘pidfile’ not defined in ‘Definition’. Using default one: ‘/var/run/fail2ban/fail2ban.pid’ Feb 8 23:59:29 cpb17 fail2ban-client: WARNING ‘syslogsocket’ not defined in ‘Definition’. Using default one: ‘auto’ Feb 8 23:59:29 cpb17 fail2ban-client: WARNING ‘dbfile’ not defined in ‘Definition’. Using default one: ‘/var/lib/fail2ban/fail2ban.sqlite3’ Feb 8 23:59:29 cpb17 fail2ban-client: WARNING ‘filter’ not defined in ‘httpd-admin’. Using default one: ‘’ Feb 8 23:59:29 cpb17 fail2ban-client: WARNING No filter set for jail httpd-admin Feb 8 23:59:29 cpb17 fail2ban-client: WARNING ‘backend’ not defined in ‘httpd-admin’. Using default one: ‘auto’ Feb 8 23:59:29 cpb17 fail2ban-client: WARNING ‘filter’ not defined in ‘httpd-admin’. Using default one: ‘’ Feb 8 23:59:29 cpb17 fail2ban-client: ERROR Failed during configuration: Bad value substitution: Feb 8 23:59:29 cpb17 fail2ban-client: section: [httpd-admin] Feb 8 23:59:29 cpb17 fail2ban-client: option : action Feb 8 23:59:29 cpb17 fail2ban-client: key : action_mw Feb 8 23:59:29 cpb17 fail2ban-client: rawval : Feb 8 23:59:29 cpb17 systemd: fail2ban.service: control process exited, code=exited status=255 Feb 8 23:59:29 cpb17 systemd: Failed to start Fail2Ban Service. Feb 8 23:59:29 cpb17 systemd: Unit fail2ban.service entered failed state. Feb 8 23:59:29 cpb17 systemd: fail2ban.service failed. Feb 8 23:59:29 cpb17 esmith::event[30368]: Job for fail2ban.service failed because the control process exited with error code. See “systemctl status fail2ban.service” and “journalctl -xe” for details. Feb 8 23:59:29 cpb17 esmith::event[30368]: [INFO] service fail2ban restart Feb 8 23:59:29 cpb17 systemd: Cannot add dependency job for unit microcode.service, ignoring: Unit is not loaded properly: Invalid argument. Feb 8 23:59:29 cpb17 systemd: Starting Fail2Ban Service… Feb 8 23:59:29 cpb17 fail2ban-client: WARNING ‘socket’ not defined in ‘Definition’. Using default one: ‘/var/run/fail2ban/fail2ban.sock’ Feb 8 23:59:29 cpb17 fail2ban-client: WARNING ‘pidfile’ not defined in ‘Definition’. Using default one: ‘/var/run/fail2ban/fail2ban.pid’ Feb 8 23:59:29 cpb17 fail2ban-client: WARNING ‘syslogsocket’ not defined in ‘Definition’. Using default one: ‘auto’ Feb 8 23:59:29 cpb17 fail2ban-client: WARNING ‘dbfile’ not defined in ‘Definition’. Using default one: ‘/var/lib/fail2ban/fail2ban.sqlite3’ Feb 8 23:59:29 cpb17 fail2ban-client: WARNING ‘filter’ not defined in ‘httpd-admin’. Using default one: ‘’ Feb 8 23:59:29 cpb17 fail2ban-client: WARNING No filter set for jail httpd-admin Feb 8 23:59:29 cpb17 fail2ban-client: WARNING ‘backend’ not defined in ‘httpd-admin’. Using default one: ‘auto’ Feb 8 23:59:29 cpb17 fail2ban-client: WARNING ‘filter’ not defined in ‘httpd-admin’. Using default one: ‘’ Feb 8 23:59:29 cpb17 fail2ban-client: ERROR Failed during configuration: Bad value substitution: Feb 8 23:59:29 cpb17 fail2ban-client: section: [httpd-admin] Feb 8 23:59:29 cpb17 fail2ban-client: option : action Feb 8 23:59:29 cpb17 fail2ban-client: key : action_mw Feb 8 23:59:29 cpb17 fail2ban-client: rawval : Feb 8 23:59:29 cpb17 systemd: fail2ban.service: control process exited, code=exited status=255 Feb 8 23:59:29 cpb17 systemd: Failed to start Fail2Ban Service. Feb 8 23:59:29 cpb17 systemd: Unit fail2ban.service entered failed state. Feb 8 23:59:29 cpb17 systemd: fail2ban.service failed. Feb 8 23:59:29 cpb17 esmith::event[30368]: Job for fail2ban.service failed because the control process exited with error code. See “systemctl status fail2ban.service” and “journalctl -xe” for details. Feb 8 23:59:29 cpb17 esmith::event[30368]: [WARNING] restart service fail2ban failed! Feb 8 23:59:29 cpb17 esmith::event[30368]: Action: /etc/e-smith/events/actions/adjust-services FAILED: 1 [0.18692] Feb 8 23:59:29 cpb17 esmith::event[30368]: Event: nethserver-fail2ban-save FAILED Feb 8 23:59:29 cpb17 systemd: fail2ban.service holdoff time over, scheduling restart. Feb 8 23:59:29 cpb17 systemd: Cannot add dependency job for unit microcode.service, ignoring: Unit is not loaded properly: Invalid argument. Feb 8 23:59:29 cpb17 systemd: Starting Fail2Ban Service… Feb 8 23:59:29 cpb17 fail2ban-client: WARNING ‘socket’ not defined in ‘Definition’. Using default one: ‘/var/run/fail2ban/fail2ban.sock’ Feb 8 23:59:29 cpb17 fail2ban-client: WARNING ‘pidfile’ not defined in ‘Definition’. Using default one: ‘/var/run/fail2ban/fail2ban.pid’ Feb 8 23:59:29 cpb17 fail2ban-client: WARNING ‘syslogsocket’ not defined in ‘Definition’. Using default one: ‘auto’ Feb 8 23:59:29 cpb17 fail2ban-client: WARNING ‘dbfile’ not defined in ‘Definition’. Using default one: ‘/var/lib/fail2ban/fail2ban.sqlite3’ Feb 8 23:59:29 cpb17 fail2ban-client: WARNING ‘filter’ not defined in ‘httpd-admin’. Using default one: ‘’ Feb 8 23:59:29 cpb17 fail2ban-client: WARNING No filter set for jail httpd-admin Feb 8 23:59:29 cpb17 fail2ban-client: WARNING ‘backend’ not defined in ‘httpd-admin’. Using default one: ‘auto’ Feb 8 23:59:29 cpb17 fail2ban-client: WARNING ‘filter’ not defined in ‘httpd-admin’. Using default one: ‘’ Feb 8 23:59:29 cpb17 fail2ban-client: ERROR Failed during configuration: Bad value substitution: Feb 8 23:59:29 cpb17 fail2ban-client: section: [httpd-admin] Feb 8 23:59:29 cpb17 fail2ban-client: option : action Feb 8 23:59:29 cpb17 fail2ban-client: key : action_mw Feb 8 23:59:29 cpb17 fail2ban-client: rawval : Feb 8 23:59:29 cpb17 systemd: fail2ban.service: control process exited, code=exited status=255 Feb 8 23:59:29 cpb17 systemd: Failed to start Fail2Ban Service. Feb 8 23:59:29 cpb17 systemd: Unit fail2ban.service entered failed state. Feb 8 23:59:29 cpb17 systemd: fail2ban.service failed. Feb 8 23:59:29 cpb17 systemd: fail2ban.service holdoff time over, scheduling restart. Feb 8 23:59:29 cpb17 systemd: Cannot add dependency job for unit microcode.service, ignoring: Unit is not loaded properly: Invalil…

d argument. `

On Monday I had installed fail2ban for centos (I just haven’t realized that there is a special version for Nethserver…). I tried to configure it by myself but it produced nearly the same errors…
hence I removed it via yum and deleted all(???) configuration files which I found…
Today (approximately at 18:30) I installed nethserver-fail2ban…

Regarding the log files, it seems that I have forgotten to delete some files from the old installation, or? But can you guess which (or is there a command to delete all files which are for fail2ban)?
Sorry, I thought I have deleted them all…

yum remove fail2ban\* nethserver-fail2ban
rm -rf /etc/fail2ban/
1 Like

thank you very much…!!! I will try it in the afternoon…

2 messages ont été déplacés vers un nouveau sujet : Sogo doesn’t display the right incoming IP in its logs

11 messages ont été intégrés dans un sujet existant : Sogo doesn’t display the right incoming IP in its logs