Centos 7 Fail2Ban NOT working

[pandabb]

Hello, if you're using Cent oS7 and your fail2ban is not working.

Fix is :
2. Download hba configuration
cd /etc
wget http://c.vestacp.com/0.9.8/ubuntu/fail2ban.tar.gz -O fail2ban.tar.gz

3. Extract configuration
tar -xzf fail2ban.tar.gz
rm -f fail2ban.tar.gz

I've encountered this error and i've checked the file and saw that my fail2ban is missing jail.local and 2 vesta.conf one in filter.d and one action.d .. all these files are located at /etc/fail2ban

Thanks

[jonn]

do you mean these instruction were followed after a custom install?

https://vestacp.com/docs/#how-to-instal ... hel-centos

If you think its a bug, report it
https://bugs.vestacp.com/

Did you disable firewalld?

Code: Select all

systemctl stop firewalld
systemctl disable firewalld
systemctl status firewalld

[pandabb]

Nope i installed it using bash vst-install.sh and didn't touch anything except for yum update.

i don't know if its just me.

[Jampie]

I had the same issue.
Installed vestacp on a new centos 7 machine, and missing:

action.d/vesta.conf
filter.d/vesta.conf
jail.local

Also, Memory Usage graph is not working in the admin.

[joem]

I have found the new version of vesta is not really stable on centos7 many install issues.

Also, Memory Usage graph is not working in the admin.

Try resetting the permissions to /usr/local/vesta/bin to 0777

[cybaster85]

same here

fail2ban not working in centos 7 and also memory graph

[Felix]

I confirm that fail2ban does NOT work on VESTA installation under CentOS 7.

The installation of VESTA was started with the command

Code: Select all

bash vst-install.sh --nginx yes --apache yes --phpfpm no --vsftpd yes --proftpd no --exim yes --dovecot yes --spamassassin yes --clamav no --named yes --iptables yes --fail2ban yes --mysql yes --postgresql no --remi yes --quota yes --hostname test --email [email protected] --password 1234

After following the guide How to install fail2ban on CentOS, it started to work BUT...

WORKS with:

• VESTA web interface
• MAIL

DOES NOT WORK with:

• FTP
• MySQL

I didn't test SSH because I have disabled password authentication altogether.

About MySQL...
The following issues need to be resolved before fail2ban can work with MySQL

• The filter is pointing to the wrong log file /var/log/mysqld.log instead of /var/log/mariadb/mariadb.log
• The filter in /etc/fail2ban/jail.local is NOT enabled (need to turn to enabled = true )
• my.cnf is NOT configured to log Access Denied messages. To do that we need to add log_warnings = 2 inside the [mysqld] section

After doing all of the above, don't forget to restart MySQL and fail2ban and it should work.

[adrianofnatal]

I notice that fail2ban isn't working when installed on CentOS 7, clean install, and VestaCP only with Nginx.
No log is generated, no ban IP is added to list, when run "fail2ban-client status" returns no jails.
The output of installation process, on last lines, show that some files related to fail2ban could not be copied, or not found.

[Mr.Erbutw]

put the fail2ban-0.8.3-16.fc8.noarch works fine
rus topic

[adrianofnatal]

Hm I'll try.
I have to install the fail2ban config scripts as described in VespaCP panel again?

Thanks!