-
-
Notifications
You must be signed in to change notification settings - Fork 1.2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[FR]: Fail2Ban stops functioning periodically without any evident reason #3716
Labels
Comments
Apashh
changed the title
[BR]:
[BR]: Fail2Ban stops functioning periodically without any evident reason
Apr 9, 2024
Apashh
changed the title
[BR]: Fail2Ban stops functioning periodically without any evident reason
[FR]: Fail2Ban stops functioning periodically without any evident reason
Apr 9, 2024
And please don't provide log-excerpts as pictures. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Environment:
The issue:
Fail2Ban stops functioning periodically without any evident reason. Graylog alerts us when there are more than 500 error requests, and we've noticed that Fail2Ban doesn't seem to work during these periods. When we access the machine, Fail2Ban appears to be up and running without any errors. However, simply restarting it resolves the issue temporarily.
Steps to reproduce
No ideas
Expected behavior
We expect Fail2Ban to continue functioning without interruption, effectively banning IP addresses that trigger the defined rules.
Observed behavior
Fail2Ban stops banning IP addresses periodically when Graylog alerts us about more than 500 error requests.
Any additional information
This issue occurs periodically and seems to coincide with spikes in error requests. Fail2Ban appears to be running without errors when accessed directly on the machine. However, it stops banning IP addresses during these periods of high error requests. Restarting Fail2Ban resolves the issue temporarily.
Configuration, dump and another helpful excerpts
Jail.conf :
Any customizations done to /etc/fail2ban/ configuration
No custom just send log to SYSLOG (graylog)
Last LOG :
Thanks for help !
The text was updated successfully, but these errors were encountered: