Yunohost fail2ban error

Support
1

Hi
I am getting fail2ban error whith yunohost due to which yunohost is not starting.

fail2ban.transmitter [21118]: ERROR Jail 'yunohost' skipped, because of wrong configuration: Invalid action definition 'sendmail-whois-lines[name=yunohost, sender="root@localhost", dest="root@localhost", logpath=/var/log/nginx/*error.log'

Any idea about the error?

2

The problem is I have migrated to fail2ban 0.10.xx due to which the logpath is not accepting more then log file. So sub section has to be created to accept multiply logs files.

Here is the /etc/fail2ban/jail.d/yunohost-jails.conf

[sshd]
enabled = true

[sshd-ddos]
enabled = true

[nginx-http-auth]
enabled = true

[postfix]
enabled = true

[dovecot]
enabled = true

[postfix-sasl]
enabled = true

[recidive]
enabled = true

[pam-generic]
enabled = true

[yunohost]
enabled  = true
port     = http,https
protocol = tcp
filter   = yunohost
logpath  = /var/log/nginx/*error.log
maxretry = 6

[yunohost-1]
enabled  = true
port     = http,https
protocol = tcp
filter   = yunohost
logpath  = /var/log/nginx/*access.log
maxretry = 6

Note: As the maxtry value is 6 when the attacks occur from IP6 I have observed that first IP6 gets ban then then attacks fallback to IP4 which then gets ban. So a particular server attack is ban by 12 attempts which is obvious too, 6 for IP6 and 6 for IP4.