You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@infra.apache.org by "Gavin (JIRA)" <ji...@apache.org> on 2014/09/30 10:04:33 UTC

[jira] [Commented] (INFRA-8405) fail2ban on aurora

    [ https://issues.apache.org/jira/browse/INFRA-8405?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14152923#comment-14152923 ] 

Gavin commented on INFRA-8405:
------------------------------

So fail2ban is installed and working, as in it seems to be banning IP addresses. However those bans are not being held in place.

One example is the same IP address has been banned 10 times this month. That same IP was allowed 213 ssh login attempts in the same day. (today)

It seems to be focusing on aurora and eos our web servers.

Fail2ban emails indicate it was banned after 3 attempts against ssh which is clearly not the case.

> fail2ban on aurora
> ------------------
>
>                 Key: INFRA-8405
>                 URL: https://issues.apache.org/jira/browse/INFRA-8405
>             Project: Infrastructure
>          Issue Type: Planned Work
>            Reporter: David Nalley
>            Assignee: Gavin
>              Labels: Cron
>
> see subject



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)