Project

General

Profile

production.log| fail2ban | production.log failregex not matching

Added by jerome l over 10 years ago

hello,
I am trying to configure fail2ban for my redmine 2.3 running on debian sqeeze.
i have followed the wiki here:[[http://www.redmine.org/projects/redmine/wiki/HowTo_Configure_Fail2ban_For_Redmine]]

According to this manual : [[http://www.fail2ban.org/wiki/index.php/MANUAL_0_8#Debian]]

The problem that there is a known bug in fail2ban on Debian (no luck for me), when i run the command:

fail2ban-regex "Failed login for 'admin' from 192.168.1.12 at 2013-08-19 17:39:25 UTC" "failregex" 

I have the output "Sorry, no match" > it confirms that fail2ban doesn't recognize the format of the production.log's .

My questions are:

- Does someone here got the same problem ?(I might be wrong in my configuration somewhere)

- which solution do I have? Maybe reconfiguring the daemon log to give a matching output for fail2ban: but how ?

- Is it possible to take this issue in the development process for future redmine release as I believe that fail2ban is one of the most used security software and if production.log meets its format,that will increase security of redmine and ease the life of users :).
The bug has been corrected by fail2ban developper, but it's a workaround (fail2ban ignore the date format, so feature is not complete).
I am sure a solution coming from redmine side would be great !
Hope to read your answers soon.

Best regards