Fail2ban / ha : still allowing banned IPs

@ninjadog wrote:

Hi

So I installed fail2ban as per:

Tested by creating a new temp user in HA. Supplied wrong password 3 times. fail2ban log correctly states “Ban…”

2020-03-30 13:12:22,114 fail2ban.filter         [516]: INFO    [ha] Found xxx.xxx.xxx.xxx - 2020-03-30 13:12:22
2020-03-30 13:12:29,277 fail2ban.filter         [516]: INFO    [ha] Found xxx.xxx.xxx.xxx- 2020-03-30 13:12:29
2020-03-30 13:12:30,883 fail2ban.filter         [516]: INFO    [ha] Found xxx.xxx.xxx.xxx- 2020-03-30 13:12:30
2020-03-30 13:12:31,198 fail2ban.actions        [516]: NOTICE  [ha] Ban xxx.xxx.xxx.xxx

iptables correctly shows the drop in the chain…

Chain f2b-ha (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 REJECT     all  --  *      *       xxx.xxx.xxx.xxx/0    reject-with icmp-port-unreachable
 8488  730K RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0

but if I use the correct password., HA allows login and presents overview screen.

I’ve set bantime to -1 so it should be permanent?

What should I look into?

Posts: 1

Participants: 1

Read full topic