Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
fail2ban not logging to SYSLOG
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
Nicias
Guru
Guru


Joined: 06 Dec 2005
Posts: 363

PostPosted: Fri Feb 24, 2012 9:12 pm    Post subject: fail2ban not logging to SYSLOG Reply with quote

I think I have fail2ban set up correctly, but it won't log to SYSLOG. As soon as I set logtarget=SYSLOG, logging stops. Any suggestions:

Code:
#cat /etc/fail2ban/fail2ban.conf
# Fail2Ban configuration file
#
# Author: Cyril Jaquier
#
# $Revision: 629 $
#

[Definition]

# Option:  loglevel
# Notes.:  Set the log level output.
#          1 = ERROR
#          2 = WARN
#          3 = INFO
#          4 = DEBUG
# Values:  NUM  Default:  3
#
loglevel = 4

# Option:  logtarget
# Notes.:  Set the log target. This could be a file, SYSLOG, STDERR or STDOUT.
#          Only one log target can be specified.
# Values:  STDOUT STDERR SYSLOG file  Default:  /var/log/fail2ban.log
#
logtarget = SYSLOG

# Option: socket
# Notes.: Set the socket file. This is used to communicate with the daemon. Do
#         not remove this file when Fail2ban runs. It will not be possible to
#         communicate with the server afterwards.
# Values: FILE  Default:  /var/run/fail2ban/fail2ban.sock
#
socket = /var/run/fail2ban/fail2ban.sock
Back to top
View user's profile Send private message
gerdesj
Guru
Guru


Joined: 29 Sep 2005
Posts: 552
Location: Yeovil, Somerset, UK

PostPosted: Mon Feb 27, 2012 1:00 am    Post subject: Re: fail2ban not logging to SYSLOG Reply with quote

What system logger are you using? (there are several available)

Also, what facility etc does f2b use?

Cheers
Jon
Back to top
View user's profile Send private message
Nicias
Guru
Guru


Joined: 06 Dec 2005
Posts: 363

PostPosted: Mon Feb 27, 2012 3:34 am    Post subject: Reply with quote

I am using metalog, I don't know what facility fail2ban uses, but it wasn't even reporting on /var/log/everything/. However, I decided not to use fail2ban anyway. I disabled password login anyway, so they can brute force all they want. Without a rsa key, no way in.
Back to top
View user's profile Send private message
bfx81
n00b
n00b


Joined: 25 Oct 2006
Posts: 21

PostPosted: Sat Mar 16, 2013 5:05 pm    Post subject: Reply with quote

FYI I've just issued a bug upstream... https://github.com/fail2ban/fail2ban/issues/141
_________________
In a world without walls... who needs windows?
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum