I just did a clean install of FreePBX 17 on Debian 12 using the install script. I'm getting hundreds of messages like these in my Fail2ban logs:
fail2ban.log:2024-11-23 23:50:57,715 fail2ban.transmitter [26003]: ERROR Command ['set', 'addignoreip', '127.0.1.1'] has failed. Received Exception("Invalid command '127.0.1.1' (no set action or not yet implemented)")
This message is repeated for all IP addresses local to the machine and all IP addresses that I've specified to be ignored by the intrusion detection screen under the firewall.
When I tried to remove and re-install fail2ban, DPKG failed with the following errors:
root@pbx:/etc/fail2ban/action.d# apt install fail2ban
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
Suggested packages:
monit
The following NEW packages will be installed:
fail2ban
0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
Need to get 0 B/451 kB of archives.
After this operation, 2180 kB of additional disk space will be used.
(Reading database ... 160787 files and directories currently installed.)
Preparing to unpack .../fail2ban_1.0.2-2_all.deb ...
Unpacking fail2ban (1.0.2-2) ...
dpkg: error processing archive /var/cache/apt/archives/fail2ban_1.0.2-2_all.deb (--unpack):
trying to overwrite '/etc/fail2ban/action.d/iptables-allports.conf', which is also in package sangoma-pbx17 2408-1.sng12
Errors were encountered while processing:
/var/cache/apt/archives/fail2ban_1.0.2-2_all.deb
E: Sub-process /usr/bin/dpkg returned an error code (1)
I went ahead and did a --force-overwrite with DPKG so I could get fail2ban installed again and got the following messages:
root@pbx:/etc/fail2ban/action.d# dpkg -i --force-overwrite /var/cache/apt/archives/fail2ban_1.0.2-2_all.deb
(Reading database ... 160787 files and directories currently installed.)
Preparing to unpack .../fail2ban_1.0.2-2_all.deb ...
Unpacking fail2ban (1.0.2-2) ...
dpkg: warning: overriding problem because --force enabled:
dpkg: warning: trying to overwrite '/etc/fail2ban/action.d/iptables-allports.conf', which is also in package sangoma-pbx17 2408-1.sng12
dpkg: warning: overriding problem because --force enabled:
dpkg: warning: trying to overwrite '/etc/fail2ban/action.d/iptables-multiport.conf', which is also in package sangoma-pbx17 2408-1.sng12
dpkg: warning: overriding problem because --force enabled:
dpkg: warning: trying to overwrite '/etc/fail2ban/filter.d/asterisk.conf', which is also in package sangoma-pbx17 2408-1.sng12
dpkg: warning: overriding problem because --force enabled:
dpkg: warning: trying to overwrite '/etc/fail2ban/jail.conf', which is also in package sangoma-pbx17 2408-1.sng12
Not sure why there's a Sangoma package that's trying to install files into the fail2ban directory, but I'd tend to assume that it should be possible to install the Debian-provided fail2ban without getting into a fight with the Sangoma packages. If FreePBX customization for fail2ban is needed, it should really be done in jail.local and fail2ban.local.
Operating Environment
FreePBX 17, Asterisk 21.5.0 installed on Debian 12.
FreePBX Version
FreePBX 17
Issue Description
I just did a clean install of FreePBX 17 on Debian 12 using the install script. I'm getting hundreds of messages like these in my Fail2ban logs:
fail2ban.log:2024-11-23 23:50:57,715 fail2ban.transmitter [26003]: ERROR Command ['set', 'addignoreip', '127.0.1.1'] has failed. Received Exception("Invalid command '127.0.1.1' (no set action or not yet implemented)")
This message is repeated for all IP addresses local to the machine and all IP addresses that I've specified to be ignored by the intrusion detection screen under the firewall.
When I tried to remove and re-install fail2ban, DPKG failed with the following errors:
root@pbx:/etc/fail2ban/action.d# apt install fail2ban Reading package lists... Done Building dependency tree... Done Reading state information... Done Suggested packages: monit The following NEW packages will be installed: fail2ban 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. Need to get 0 B/451 kB of archives. After this operation, 2180 kB of additional disk space will be used. (Reading database ... 160787 files and directories currently installed.) Preparing to unpack .../fail2ban_1.0.2-2_all.deb ... Unpacking fail2ban (1.0.2-2) ... dpkg: error processing archive /var/cache/apt/archives/fail2ban_1.0.2-2_all.deb (--unpack): trying to overwrite '/etc/fail2ban/action.d/iptables-allports.conf', which is also in package sangoma-pbx17 2408-1.sng12 Errors were encountered while processing: /var/cache/apt/archives/fail2ban_1.0.2-2_all.deb E: Sub-process /usr/bin/dpkg returned an error code (1)
I went ahead and did a --force-overwrite with DPKG so I could get fail2ban installed again and got the following messages:
root@pbx:/etc/fail2ban/action.d# dpkg -i --force-overwrite /var/cache/apt/archives/fail2ban_1.0.2-2_all.deb (Reading database ... 160787 files and directories currently installed.) Preparing to unpack .../fail2ban_1.0.2-2_all.deb ... Unpacking fail2ban (1.0.2-2) ... dpkg: warning: overriding problem because --force enabled: dpkg: warning: trying to overwrite '/etc/fail2ban/action.d/iptables-allports.conf', which is also in package sangoma-pbx17 2408-1.sng12 dpkg: warning: overriding problem because --force enabled: dpkg: warning: trying to overwrite '/etc/fail2ban/action.d/iptables-multiport.conf', which is also in package sangoma-pbx17 2408-1.sng12 dpkg: warning: overriding problem because --force enabled: dpkg: warning: trying to overwrite '/etc/fail2ban/filter.d/asterisk.conf', which is also in package sangoma-pbx17 2408-1.sng12 dpkg: warning: overriding problem because --force enabled: dpkg: warning: trying to overwrite '/etc/fail2ban/jail.conf', which is also in package sangoma-pbx17 2408-1.sng12
Not sure why there's a Sangoma package that's trying to install files into the fail2ban directory, but I'd tend to assume that it should be possible to install the Debian-provided fail2ban without getting into a fight with the Sangoma packages. If FreePBX customization for fail2ban is needed, it should really be done in jail.local and fail2ban.local.
Operating Environment
FreePBX 17, Asterisk 21.5.0 installed on Debian 12.
+---------------------+------------+---------+------------+-----------+ | Module | Version | Status | License | Signature | +---------------------+------------+---------+------------+-----------+ | accountcodepreserve | 17.0.0.1 | Enabled | GPLv2 | Sangoma | | allowlist | 17.0.1.1 | Enabled | GPLv3+ | Sangoma | | amd | 17.0.1 | Enabled | GPLv3+ | Sangoma | | announcement | 17.0.2.1 | Enabled | GPLv3+ | Sangoma | | api | 17.0.1.6 | Enabled | AGPLv3+ | Sangoma | | arimanager | 17.0.1.1 | Enabled | GPLv3+ | Sangoma | | asterisk-cli | 17.0.2 | Enabled | GPLv3+ | Sangoma | | asteriskinfo | 17.0.2 | Enabled | GPLv3+ | Sangoma | | backup | 17.0.5.61 | Enabled | GPLv3+ | Sangoma | | blacklist | 17.0.1.2 | Enabled | GPLv3+ | Sangoma | | builtin | | Enabled | | Unsigned | | bulkhandler | 17.0.5 | Enabled | GPLv3+ | Sangoma | | calendar | 17.0.4.20 | Enabled | GPLv3+ | Sangoma | | callback | 17.0.2.1 | Enabled | GPLv3+ | Sangoma | | callerid | 17.0.1 | Enabled | Commercial | Sangoma | | callforward | 17.0.1.6 | Enabled | AGPLv3+ | Sangoma | | callrecording | 17.0.3.8 | Enabled | AGPLv3+ | Sangoma | | callwaiting | 17.0.3.4 | Enabled | GPLv3+ | Sangoma | | cdr | 17.0.4.29 | Enabled | GPLv3+ | Sangoma | | cel | 17.0.2.10 | Enabled | GPLv3+ | Sangoma | | certman | 17.0.3.13 | Enabled | AGPLv3+ | Sangoma | | cidlookup | 17.0.1.1 | Enabled | GPLv3+ | Sangoma | | conferences | 17.0.3.2 | Enabled | GPLv3+ | Sangoma | | configedit | 17.0.1.4 | Enabled | AGPLv3+ | Sangoma | | contactmanager | 17.0.5.12 | Enabled | GPLv3+ | Sangoma | | core | 17.0.18.7 | Enabled | GPLv3+ | Sangoma | | customappsreg | 17.0.1 | Enabled | GPLv3+ | Sangoma | | customcontexts | 17.0.1.3 | Enabled | GPLv2+ | Sangoma | | dashboard | 17.0.4.6 | Enabled | AGPLv3+ | Sangoma | | daynight | 17.0.1.1 | Enabled | GPLv3+ | Sangoma | | dictate | 17.0.1.2 | Enabled | GPLv3+ | Sangoma | | directory | 17.0.1.1 | Enabled | GPLv3+ | Sangoma | | disa | 17.0.6 | Enabled | AGPLv3+ | Sangoma | | donotdisturb | 17.0.2.3 | Enabled | GPLv3+ | Sangoma | | dynroute | 17.0.3.2 | Enabled | GPLv3+ | Sangoma | | endpoint | 17.0.1.93 | Enabled | Commercial | Sangoma | | extensionroutes | 17.0.1 | Enabled | Commercial | Sangoma | | extensionsettings | 17.0.1 | Enabled | GPLv3+ | Sangoma | | fax | 17.0.3.4 | Enabled | GPLv3+ | Sangoma | | featurecodeadmin | 17.0.2 | Enabled | GPLv3+ | Sangoma | | filestore | 17.0.2.31 | Enabled | AGPLv3 | Sangoma | | findmefollow | 17.0.4.10 | Enabled | GPLv3+ | Sangoma | | firewall | 17.0.1.29 | Enabled | AGPLv3+ | Sangoma | | framework | 17.0.19.17 | Enabled | GPLv2+ | Sangoma | | hotelwakeup | 17.0.1.6 | Enabled | GPLv2 | Sangoma | | iaxsettings | 17.0.1 | Enabled | AGPLv3 | Sangoma | | infoservices | 17.0.1.1 | Enabled | GPLv2+ | Sangoma | | ivr | 17.0.8 | Enabled | GPLv3+ | Sangoma | | languages | 17.0.1 | Enabled | GPLv3+ | Sangoma | | logfiles | 17.0.3.3 | Enabled | GPLv3+ | Sangoma | | manager | 17.0.6 | Enabled | GPLv2+ | Sangoma | | miscapps | 17.0.3 | Enabled | GPLv3+ | Sangoma | | miscdests | 17.0.1.1 | Enabled | GPLv3+ | Sangoma | | missedcall | 17.0.1.2 | Enabled | GPLv3+ | Sangoma | | music | 17.0.5 | Enabled | GPLv3+ | Sangoma | | outcnam | 17.0.1 | Enabled | GPLv3+ | Sangoma | | outroutemsg | 17.0.1 | Enabled | GPLv3+ | Sangoma | | paging | 17.0.3 | Enabled | GPLv3+ | Sangoma | | parking | 17.0.2.5 | Enabled | GPLv3+ | Sangoma | | phpinfo | 17.0.1 | Enabled | GPLv2+ | Sangoma | | pinsets | 17.0.3.2 | Enabled | GPLv3+ | Sangoma | | pm2 | 17.0.3.3 | Enabled | AGPLv3+ | Sangoma | | presencestate | 17.0.2.4 | Enabled | GPLv3+ | Sangoma | | printextensions | 17.0.1.2 | Enabled | GPLv3+ | Sangoma | | queueprio | 17.0.1.4 | Enabled | GPLv3+ | Sangoma | | queues | 17.0.1.13 | Enabled | GPLv2+ | Sangoma | | recordings | 17.0.2.3 | Enabled | GPLv3+ | Sangoma | | restapps | 17.0.1.27 | Enabled | Commercial | Sangoma | | ringgroups | 17.0.2.6 | Enabled | GPLv3+ | Sangoma | | sangomaconnect | 17.0.1.42 | Enabled | Commercial | Sangoma | | sangomartapi | 17.0.2.16 | Enabled | Commercial | Sangoma | | setcid | 17.0.1.2 | Enabled | GPLv3+ | Sangoma | | sipsettings | 17.0.6.9 | Enabled | AGPLv3+ | Sangoma | | sipstation | 17.0.3.4 | Enabled | Commercial | Sangoma | | sms | 17.0.1.15 | Enabled | Commercial | Sangoma | | smsconnector | 16.0.17.2 | Enabled | GPLv3+ | Unknown | | smsplus | 17.0.3 | Enabled | Commercial | Sangoma | | soundlang | 17.0.4.1 | Enabled | GPLv3+ | Sangoma | | superfecta | 17.0.3.5 | Enabled | GPLv2+ | Sangoma | | sysadmin | 17.0.2.3 | Enabled | Commercial | Sangoma | | timeconditions | 17.0.1.18 | Enabled | GPLv3+ | Sangoma | | tts | 17.0.1.1 | Enabled | GPLv3+ | Sangoma | | ttsengines | 17.0.1 | Enabled | AGPLv3 | Sangoma | | ucp | 17.0.4.23 | Enabled | AGPLv3+ | Sangoma | | userman | 17.0.6.29 | Enabled | AGPLv3+ | Sangoma | | vmblast | 17.0.2 | Enabled | GPLv3+ | Sangoma | | voicemail | 17.0.5.26 | Enabled | GPLv3+ | Sangoma | | voipinnovations | 17.0.1.4 | Enabled | Commercial | Sangoma | | weakpasswords | 17.0.1 | Enabled | GPLv3+ | Sangoma | | webrtc | 17.0.2.2 | Enabled | GPLv3+ | Sangoma | +---------------------+------------+---------+------------+-----------+
Relevant log output