ramarajan222
commented
6 months ago Hi @Andsup ,
Are you facing this issue on the newly installed system (using the latest installation script )? if not build the new system using the latest installation script and check.
On the Newly installation system, fail2ban is working and is not able to reproduce the issue.
root@uc-42126347:~# fail2ban-client version 1.0.2 root@uc-42126347:~# iptables -V iptables v1.8.9 (nf_tables) root@uc-42126347:~# iptables -L INPUT Chain INPUT (policy ACCEPT) target prot opt source destination fail2ban-SIP all -- anywhere anywhere fail2ban-FTP tcp -- anywhere anywhere multiport dports ftp fail2ban-BadBots tcp -- anywhere anywhere multiport dports http,https fail2ban-api tcp -- anywhere anywhere multiport dports http,https fail2ban-openvpn udp -- anywhere anywhere multiport dports openvpn fail2ban-recidive all -- anywhere anywhere fail2ban-PBX-GUI all -- anywhere anywhere fail2ban-SSH tcp -- anywhere anywhere multiport dports ssh fail2ban-apache-auth all -- anywhere anywhere fail2ban-sng-deskapp tcp -- anywhere anywhere fpbxfirewall all -- anywhere anywhere root@uc-42126347:~# fwconsole ma list | grep firewall | firewall | 17.0.1.17 | Enabled | AGPLv3+ | Sangoma |
Andsup
FreePBX Version
FreePBX 17
Issue Description
Freepbx 17 is generating lot of iptables errors.
NOTE: iptables was replaced by nftables starting in Debian 10
Examples : (more below)
2024-05-09 21:16:32,734 fail2ban.actions [440]: ERROR Failed to stop jail 'vsftpd-iptables' action 'iptables-multiport-FTP': Error stopping action Jail('vsftpd-iptables')/iptables-multiport-FTP: 'Script error' 2024-05-09 21:16:32,740 fail2ban.utils [440]: ERROR 7f991a3af7b0 -- exec: iptables -D INPUT -p tcp -m multiport --dports http,https -j fail2ban-BadBots 2024-05-09 21:16:32,740 fail2ban.utils [440]: ERROR 7f991a3af7b0 -- stderr: "iptables v1.8.9 (nf_tables): Chain 'fail2ban-BadBots' does not exist" 2024-05-09 21:16:32,740 fail2ban.utils [440]: ERROR 7f991a3af7b0 -- stderr: "Try `iptables -h' or 'iptables --help' for more information." 2024-05-09 21:16:32,740 fail2ban.utils [440]: ERROR 7f991a3af7b0 -- stderr: 'iptables: No chain/target/match by that name.' 2024-05-09 21:16:32,740 fail2ban.utils [440]: ERROR 7f991a3af7b0 -- stderr: 'iptables: No chain/target/match by that name.' 2024-05-09 21:16:32,740 fail2ban.utils [440]: ERROR 7f991a3af7b0 -- returned 1 2024-05-09 21:16:32,740 fail2ban.actions [440]: ERROR Failed to stop jail 'apache-badbots' action 'iptables-multiport-BadBots': Error stopping action Jail('apache-badbots')/iptables-multiport-BadBots: 'Script error' 2024-05-09 21:24:27,345 fail2ban.utils [441]: ERROR 7fdd06e9a080 -- exec: iptables -D INPUT -p tcp -m multiport --dports ssh -j fail2ban-sshd 2024-05-09 21:24:27,345 fail2ban.utils [441]: ERROR 7fdd06e9a080 -- stderr: 'iptables v1.8.9 (nf_tables): CHAIN_DEL failed (Device or resource busy): chain fail2ban-sshd' 2024-05-09 21:24:27,345 fail2ban.utils [441]: ERROR 7fdd06e9a080 -- returned 4 2024-05-09 21:24:27,345 fail2ban.actions [441]: ERROR Failed to stop jail 'sshd' action 'iptables-multiport': Error stopping action Jail('sshd')/iptables-multiport: 'Scr2024-05-09 21:24:41,228 fail2ban.server [442]: INFO --------------------------------------------------
Operating Environment
debian 12.5 iptables v1.8.9 (nf_tables) Fail2Ban v1.0.2
Relevant log output