`fail2ban-unban` command not found.
# locate fail2ban-unban
/etc/e-smith/events/actions/fail2ban-unban
/etc/e-smith/events/actions/nethserver-fail2ban-unban-whitelist
/etc/e-smith/events/nethserver-fail2ban-save/S10nethserver-fail2ban-unban-whitelist
/etc/e-smith/events/nethserver-fail2banUnBan-save/S10fail2ban-unban
fail2ban log shows this notice:
fail2ban.filtersystemd [17187]: NOTICE Jail started without ‘journalmatch’ set. Jail regexs will be checked against all journal entries, which is not advised for performance reasons.
Updating fail2ban showed some errors but it seems they are no more afterwards, so maybe there is nothing to worry about.
Dec 1 10:36:13 server systemd: Started Fail2Ban Service.
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,327 fail2ban.configreader [20650]: ERROR Found no accessible config files for 'action.d/shorewall-nethserver' under /etc/fail2ban
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,327 fail2ban.jailreader [20650]: ERROR Unable to read action 'shorewall-nethserver'
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,327 fail2ban.jailsreader [20650]: ERROR Errors in jail 'sshd'. Skipping...
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,328 fail2ban.jailreader [20650]: ERROR Unable to read action 'shorewall-nethserver'
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,328 fail2ban.jailsreader [20650]: ERROR Errors in jail 'apache-auth'. Skipping...
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,329 fail2ban.jailreader [20650]: ERROR Unable to read action 'shorewall-nethserver'
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,329 fail2ban.jailsreader [20650]: ERROR Errors in jail 'apache-badbots'. Skipping...
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,330 fail2ban.jailreader [20650]: ERROR Unable to read action 'shorewall-nethserver'
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,330 fail2ban.jailsreader [20650]: ERROR Errors in jail 'apache-noscript'. Skipping...
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,331 fail2ban.jailreader [20650]: ERROR Unable to read action 'shorewall-nethserver'
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,331 fail2ban.jailsreader [20650]: ERROR Errors in jail 'apache-overflows'. Skipping...
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,335 fail2ban.jailreader [20650]: ERROR Unable to read action 'shorewall-nethserver'
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,335 fail2ban.jailsreader [20650]: ERROR Errors in jail 'apache-nohome'. Skipping...
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,336 fail2ban.jailreader [20650]: ERROR Unable to read action 'shorewall-nethserver'
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,336 fail2ban.jailsreader [20650]: ERROR Errors in jail 'apache-fakegooglebot'. Skipping...
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,337 fail2ban.jailreader [20650]: ERROR Unable to read action 'shorewall-nethserver'
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,337 fail2ban.jailsreader [20650]: ERROR Errors in jail 'apache-modsecurity'. Skipping...
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,338 fail2ban.jailreader [20650]: ERROR Unable to read action 'shorewall-nethserver'
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,338 fail2ban.jailsreader [20650]: ERROR Errors in jail 'apache-shellshock'. Skipping...
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,339 fail2ban.jailreader [20650]: ERROR Unable to read action 'shorewall-nethserver'
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,339 fail2ban.jailsreader [20650]: ERROR Errors in jail 'nginx-http-auth'. Skipping...
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,341 fail2ban.jailreader [20650]: ERROR Unable to read action 'shorewall-nethserver'
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,341 fail2ban.jailsreader [20650]: ERROR Errors in jail 'nginx-botsearch'. Skipping...
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,343 fail2ban.jailreader [20650]: ERROR Unable to read action 'shorewall-nethserver'
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,343 fail2ban.jailsreader [20650]: ERROR Errors in jail 'postfix'. Skipping...
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,345 fail2ban.jailreader [20650]: ERROR Unable to read action 'shorewall-nethserver'
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,345 fail2ban.jailsreader [20650]: ERROR Errors in jail 'postfix-rbl'. Skipping...
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,347 fail2ban.jailreader [20650]: ERROR Unable to read action 'shorewall-nethserver'
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,347 fail2ban.jailsreader [20650]: ERROR Errors in jail 'dovecot'. Skipping...
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,348 fail2ban.jailreader [20650]: ERROR Unable to read action 'shorewall-nethserver'
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,348 fail2ban.jailsreader [20650]: ERROR Errors in jail 'sieve'. Skipping...
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,350 fail2ban.jailreader [20650]: ERROR Unable to read action 'shorewall-nethserver'
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,350 fail2ban.jailsreader [20650]: ERROR Errors in jail 'postfix-sasl'. Skipping...
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,351 fail2ban.jailreader [20650]: ERROR Unable to read action 'shorewall-nethserver'
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,351 fail2ban.jailsreader [20650]: ERROR Errors in jail 'mysqld-auth'. Skipping...
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,353 fail2ban.jailreader [20650]: ERROR Unable to read action 'shorewall-nethserver'
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,353 fail2ban.jailsreader [20650]: ERROR Errors in jail 'recidive'. Skipping...
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,354 fail2ban.jailreader [20650]: ERROR Unable to read action 'shorewall-nethserver'
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,354 fail2ban.jailsreader [20650]: ERROR Errors in jail 'pam-generic'. Skipping...
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,355 fail2ban.jailreader [20650]: ERROR Unable to read action 'shorewall-nethserver'
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,356 fail2ban.jailsreader [20650]: ERROR Errors in jail 'httpd-admin'. Skipping...
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,357 fail2ban.jailreader [20650]: ERROR Unable to read action 'shorewall-nethserver'
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,357 fail2ban.jailsreader [20650]: ERROR Errors in jail 'pam-generic-nethserver'. Skipping...
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,358 fail2ban.jailreader [20650]: ERROR Unable to read action 'shorewall-nethserver'
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,358 fail2ban.jailsreader [20650]: ERROR Errors in jail 'postfix-ddos'. Skipping...
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,359 fail2ban.jailreader [20650]: ERROR Unable to read action 'shorewall-nethserver'
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,359 fail2ban.jailsreader [20650]: ERROR Errors in jail 'postfix-sasl-abuse'. Skipping...
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,360 fail2ban.jailreader [20650]: ERROR Unable to read action 'shorewall-nethserver'
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,360 fail2ban.jailsreader [20650]: ERROR Errors in jail 'apache-scan'. Skipping...
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,361 fail2ban.jailreader [20650]: ERROR Unable to read action 'shorewall-nethserver'
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,361 fail2ban.jailsreader [20650]: ERROR Errors in jail 'phpmyadmin'. Skipping...
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,362 fail2ban.jailreader [20650]: ERROR Unable to read action 'shorewall-nethserver'
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,362 fail2ban.jailsreader [20650]: ERROR Errors in jail 'dovecot-nethserver'. Skipping...
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,363 fail2ban.jailreader [20650]: ERROR Unable to read action 'shorewall-nethserver'
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,363 fail2ban.jailsreader [20650]: ERROR Errors in jail 'nextcloud-auth'. Skipping...
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,364 fail2ban.jailreader [20650]: ERROR Unable to read action 'shorewall-nethserver'
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,364 fail2ban.jailsreader [20650]: ERROR Errors in jail 'rspamd'. Skipping...
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,365 fail2ban.configreader [20650]: ERROR Found no accessible config files for 'filter.d/sshd-ddos' under /etc/fail2ban
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,365 fail2ban.jailreader [20650]: ERROR Unable to read the filter 'sshd-ddos'
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,365 fail2ban.jailsreader [20650]: ERROR Errors in jail 'sshd-ddos'. Skipping...
Dec 1 10:36:13 server fail2ban-server: 2019-12-01 10:36:13,367 fail2ban [20650]: ERROR Async configuration of server failed
Dec 1 10:36:13 server systemd: fail2ban.service: main process exited, code=exited, status=255/n/a
Dec 1 10:36:13 server fail2ban-client: 2019-12-01 10:36:13,405 fail2ban [20653]: ERROR Failed to access socket path: /var/run/fail2ban/fail2ban.sock. Is fail2ban running?
Dec 1 10:36:13 server systemd: fail2ban.service: control process exited, code=exited status=255
Dec 1 10:36:13 server systemd: Unit fail2ban.service entered failed state.
Dec 1 10:36:13 server systemd: fail2ban.service failed.
Dec 1 10:36:17 server esmith::event[20662]: Event: nethserver-fail2ban-update
Dec 1 10:36:17 server esmith::event[20662]: Migrating existing database configuration
(...)
Recidive detected in log by fail2ban.filter
but not shown within ipset -L
nor fail2ban-listban
:
fail2ban.filter [4248]: INFO [recidive] Found 10.0.0.67 - 2019-12-01 11:16:48
If possible, on the manual specify that stats are not in real-time, as people will complain about stats mismatch.
Feature: not really necessary but on the unban list, don’t know if people will find it useful to list the cause of the ban (which jail(s) were matched by the IP address).