fail2ban: WARNING 'allowipv6' not defined in 'Definition'. Using default one: 'auto'

[B52]

Hallo Community

Seit Debian Bookworm läuft fail2ban nicht mehr:

Code: Alles auswählen

# systemctl status fail2ban
(...)
Jun 15 22:19:14 nyx7 fail2ban-server[7950]: 2023-06-15 22:19:14,086 fail2ban.configreader   [7950]: WARNING 'allowipv6' not defined in 'Definition'. Using default one: 'auto'

gemäss #1024305 schein dies ein bekannter Bug zu sein. Das Eintragen von:

Code: Alles auswählen

[DEFAULT]
allowipv6 = auto

unter

Code: Alles auswählen

/etc/fail2ban/jail.local

bringt jedoch keine Verbesserung. Muss ich hier einfach warten, bis dies gefixt wird? Bis dahin läuft jedoch fail2ban nicht.

Code: Alles auswählen

# fail2ban-client -i
Fail2Ban v1.0.2 reads log file that contains password failure report
and bans the corresponding IP addresses using firewall rules.

fail2ban> status sshd
2023-06-16 08:06:40,432 fail2ban                [12097]: ERROR   Failed to access socket path: /var/run/fail2ban/fail2ban.sock. Is fail2ban running?

[debilian]

Failed to access socket path: /var/run/fail2ban/fail2ban.sock. Is fail2ban running?

hast du das überprüft?

gruss

[B52]

Failed to access socket path: /var/run/fail2ban/fail2ban.sock. Is fail2ban running?

hast du das überprüft?

Ja, fail2ban läuft:

Code: Alles auswählen

# systemctl enable fail2ban
# systemctl status fail2ban
Synchronizing state of fail2ban.service with SysV service script with /lib/systemd/systemd-sysv-install.
Executing: /lib/systemd/systemd-sysv-install enable fail2ban
root@nyx7:~# systemctl status fail2ban
× fail2ban.service - Fail2Ban Service
     Loaded: loaded (/lib/systemd/system/fail2ban.service; enabled; preset: enabled)
     Active: failed (Result: exit-code) since Fri 2023-06-16 10:07:46 CEST; 3h 36min ago
   Duration: 438ms
       Docs: man:fail2ban(1)
   Main PID: 967 (code=exited, status=255/EXCEPTION)
        CPU: 127ms

Jun 16 10:07:46 nyx7 systemd[1]: Started fail2ban.service - Fail2Ban Service.
Jun 16 10:07:46 nyx7 fail2ban-server[967]: 2023-06-16 10:07:46,281 fail2ban.configreader   [967]: WARNING 'allowipv6' n>
Jun 16 10:07:46 nyx7 fail2ban-server[967]: Server ready
Jun 16 10:07:46 nyx7 systemd[1]: fail2ban.service: Main process exited, code=exited, status=255/EXCEPTION
Jun 16 10:07:46 nyx7 systemd[1]: fail2ban.service: Failed with result 'exit-code'.

[Par@noid]

[sshd]
enabled = true
backend = systemd

Code: Alles auswählen

systemctl status fail2ban
● fail2ban.service - Fail2Ban Service
     Loaded: loaded (/lib/systemd/system/fail2ban.service; enabled; preset: enabled)
     Active: active (running) since Tue 2023-07-18 09:16:44 CEST; 2s ago
       Docs: man:fail2ban(1)
   Main PID: 24028 (fail2ban-server)
      Tasks: 5 (limit: 9247)
     Memory: 16.7M
        CPU: 463ms
     CGroup: /system.slice/fail2ban.service
             └─24028 /usr/bin/python3 /usr/bin/fail2ban-server -xf start

Jul 18 09:16:44 rpi4-20230612 systemd[1]: Started fail2ban.service - Fail2Ban Service.
Jul 18 09:16:44 rpi4-20230612 fail2ban-server[24028]: 2023-07-18 09:16:44,796 fail2ban.configreader   [24028]:>
Jul 18 09:16:45 rpi4-20230612 fail2ban-server[24028]: Server ready
lines 1-14/14 (END)

Code: Alles auswählen

rpi4-20230612
CPU: ARM Cortex-A72 @ 4x 1,5GHz
Kernel: aarch64 Linux 6.1.0-10-arm64
Distributor ID:	Debian
Description:	Debian GNU/Linux 12 (bookworm)
Release:	12
Codename:	bookworm

MfG Par@noid

[oln]

Ja, fail2ban läuft:

Code: Alles auswählen

     Active: failed (Result: exit-code) since Fri 2023-06-16 10:07:46 CEST; 3h 36min ago

Nein tut es nicht.

[Par@noid]

config anpassen backend = auto auf backend = systemd

Code: Alles auswählen

systemctl status fail2ban
● fail2ban.service - Fail2Ban Service
     Loaded: loaded (/lib/systemd/system/fail2ban.service; enabled; preset: ena>
     Active: active (running) since Tue 2023-07-18 09:16:44 CEST; 1h 34min ago
       Docs: man:fail2ban(1)
   Main PID: 24028 (fail2ban-server)
      Tasks: 5 (limit: 9247)
     Memory: 18.9M
        CPU: 4.515s
     CGroup: /system.slice/fail2ban.service
             └─24028 /usr/bin/python3 /usr/bin/fail2ban-server -xf start

Jul 18 09:16:44 rpi4-20230612 systemd[1]: Started fail2ban.service - Fail2Ban S>
Jul 18 09:16:44 rpi4-20230612 fail2ban-server[24028]: 2023-07-18 09:16:44,796 f>
Jul 18 09:16:45 rpi4-20230612 fail2ban-server[24028]: Server ready
lines 1-14/14 (END)