<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
	<channel>
		<atom:link href="https://dev1galaxy.org/extern.php?action=feed&amp;tid=7368&amp;type=rss" rel="self" type="application/rss+xml" />
		<title><![CDATA[Dev1 Galaxy Forum / [SOLVED] Excalibur and fail2ban]]></title>
		<link>https://dev1galaxy.org/viewtopic.php?id=7368</link>
		<description><![CDATA[The most recent posts in [SOLVED] Excalibur and fail2ban.]]></description>
		<lastBuildDate>Fri, 19 Jun 2026 02:42:41 +0000</lastBuildDate>
		<generator>FluxBB</generator>
		<item>
			<title><![CDATA[Re: [SOLVED] Excalibur and fail2ban]]></title>
			<link>https://dev1galaxy.org/viewtopic.php?pid=64331#p64331</link>
			<description><![CDATA[<p>Marjorie, Thank you for your contribution, I&#039;m using your tips as well.</p>]]></description>
			<author><![CDATA[dummy@example.com (GlennW)]]></author>
			<pubDate>Fri, 19 Jun 2026 02:42:41 +0000</pubDate>
			<guid>https://dev1galaxy.org/viewtopic.php?pid=64331#p64331</guid>
		</item>
		<item>
			<title><![CDATA[Re: [SOLVED] Excalibur and fail2ban]]></title>
			<link>https://dev1galaxy.org/viewtopic.php?pid=64317#p64317</link>
			<description><![CDATA[<p>I&#039;ve just upgraded my server to Excalibur, having successfully updated a couple of other desktop systems without issue.<br />The server box (local not in the cloud) does however use fal2ban to block spammers on its postfix/dovecot mailserver.</p><p>Fail2ban was working fine on Daedulus but failed when upgraded to Excalibur, with the same unhelpful ERROR message mentioned elsewhere.</p><p>I don&#039;t think I needed to change my logging target - I&#039;m logging to /var/log/fail2ban.log - but for others perhaps worth checking the default which is set by </p><div class="codebox"><pre><code>logtarget = /var/log/fail2ban.log</code></pre></div><p> in /etc/fail2ban/fail2ban.conf .</p><p>There are two issues I found.</p><p>1) <strong>pyinotify</strong>. The package python3-pyinotify was not installed.</p><div class="codebox"><pre><code>apt-get install python3-pyinotify</code></pre></div><p>2) The folder /etc/fai2ban/jail.d contains the file <strong>defaults.debian.conf</strong> with the code:</p><div class="codebox"><pre><code>[DEFAULT]
banaction = nftables
banaction_allports = nftables[type=allports]

[sshd]
backend = systemd
journalmatch = _SYSTEMD_UNIT=ssh.service + _COMM=sshd
enabled = true</code></pre></div><p>I ban using nftables so those lines worked for me. If you use iptables or another firewall then you would need to change this.</p><p>However the only jail enabled [sshd] has backend = systemd, this is what breaks fail2ban on a Devuan install. <br />Ironically I don&#039;t strictly need this jail as my mail server in on my local network and I&#039;ve closed port 22 to the internet at the router.</p><p>Rather than amend this package file, which, of course could be overwritten at an update, I found the solution that worked for me was to add backend=pyinotify to each jail I enabled in /etc/fai2ban/jail.local/ .</p><p>So:</p><div class="codebox"><pre class="vscroll"><code>[DEFAULT]
# use nftables
banaction = nftables
banaction_allports = nftables[type=allports]

# Whitelist specific IPs or ranges
ignoreip = 127.0.0.1/8 192.168.1.0/24

[sshd]
backend = pyinotify
enabled = true

[apache-auth]
backend = pyinotify
enabled = true

[dovecot]
backend = pyinotify
enabled = true
port    = pop3,pop3s,imap2,imaps,submission,465,sieve
maxretry = 3
findtime = 12h
bantime = 3d

[postfix]
backend = pyinotify
enabled = true
mode = auth
logpath = /var/log/mail.log
maxretry = 3
findtime = 12h
bantime = 3d</code></pre></div><p>and so on for a couple more, non standard jails/filters I enable.</p><p>I see that python3-systemd is still marked as a dependency and python3-inotify simply as a recommend. <br />On my upgrade python3-systemd wasn&#039;t installed either, maybe it would have been on a systemd box.</p><p>This is exactly the problem Steve_V identified last year, not up to me whether it&#039;s worth making Devuan specific changes to make upgrading or installing fail2ban work out of the box.</p>]]></description>
			<author><![CDATA[dummy@example.com (Marjorie)]]></author>
			<pubDate>Wed, 17 Jun 2026 11:33:26 +0000</pubDate>
			<guid>https://dev1galaxy.org/viewtopic.php?pid=64317#p64317</guid>
		</item>
		<item>
			<title><![CDATA[Re: [SOLVED] Excalibur and fail2ban]]></title>
			<link>https://dev1galaxy.org/viewtopic.php?pid=62945#p62945</link>
			<description><![CDATA[<p>Thanks @steve_v and @GlennW. It&#039;s OK Greta don&#039;t fret so much.</p><p>TC</p>]]></description>
			<author><![CDATA[dummy@example.com (trinidad)]]></author>
			<pubDate>Sun, 29 Mar 2026 11:05:28 +0000</pubDate>
			<guid>https://dev1galaxy.org/viewtopic.php?pid=62945#p62945</guid>
		</item>
		<item>
			<title><![CDATA[Re: [SOLVED] Excalibur and fail2ban]]></title>
			<link>https://dev1galaxy.org/viewtopic.php?pid=62940#p62940</link>
			<description><![CDATA[<p>I unpacked fail2ban_1.1.0-8_all and rsync&#039;d the files into the install, but didn&#039;t run the scripts and it seems like it&#039;s working. No error messages.</p><p>Cheers!</p>]]></description>
			<author><![CDATA[dummy@example.com (GlennW)]]></author>
			<pubDate>Sun, 29 Mar 2026 06:09:40 +0000</pubDate>
			<guid>https://dev1galaxy.org/viewtopic.php?pid=62940#p62940</guid>
		</item>
		<item>
			<title><![CDATA[Re: [SOLVED] Excalibur and fail2ban]]></title>
			<link>https://dev1galaxy.org/viewtopic.php?pid=62922#p62922</link>
			<description><![CDATA[<p>Hi, I have had the same problem with fail2ban with excalibur... (I&#039;ve now decided to persist with this version of Devuan) Thank you for your efforts!</p><p>I didn&#039;t get any joy with the above examples or nixers script.</p><p>I eventuall tried to roll-back to fail2ban_1.0.2-2_all.deb. <br />python3-pyinotify was already installed.</p><p>When rollingback I got an error saying asynchat was not installed, so I installed python3-standard-asynchat_3.13.0-5_all.deb <br />and the fail2ban script started with out error.</p><p>I&#039;ve only done one reboot since, so YMMV, but I hope it helps some of you here. <br />I&#039;ll see what happends when I eventually upgrade fail2ban later.<br />Cheers!</p>]]></description>
			<author><![CDATA[dummy@example.com (GlennW)]]></author>
			<pubDate>Sat, 28 Mar 2026 05:49:45 +0000</pubDate>
			<guid>https://dev1galaxy.org/viewtopic.php?pid=62922#p62922</guid>
		</item>
		<item>
			<title><![CDATA[Re: [SOLVED] Excalibur and fail2ban]]></title>
			<link>https://dev1galaxy.org/viewtopic.php?pid=59876#p59876</link>
			<description><![CDATA[<p>Huh, that&#039;s strange. I installed fail2ban on both a Trixie and an Excalibur system recently and both worked perfectly (once I set the proper logging method.) Maybe it&#039;s because I used <span class="bbc">nftables</span> and <span class="bbc">pynotify</span> from the start? Those seem to be part of some people&#039;s &quot;fixes.&quot;</p>]]></description>
			<author><![CDATA[dummy@example.com (stultumanto)]]></author>
			<pubDate>Thu, 20 Nov 2025 06:04:50 +0000</pubDate>
			<guid>https://dev1galaxy.org/viewtopic.php?pid=59876#p59876</guid>
		</item>
		<item>
			<title><![CDATA[Re: [SOLVED] Excalibur and fail2ban]]></title>
			<link>https://dev1galaxy.org/viewtopic.php?pid=59868#p59868</link>
			<description><![CDATA[<p>It seems that a few others have stumbled upon this bug recently, so I thought I would post a working and stable fix.&#160; It can be found at <a href="https://lists.dyne.org/lurker/message/20251107.201551.bdb21eb4.it.html" rel="nofollow">https://lists.dyne.org/lurker/message/2 … b4.it.html</a></p>]]></description>
			<author><![CDATA[dummy@example.com (nixer)]]></author>
			<pubDate>Wed, 19 Nov 2025 21:35:16 +0000</pubDate>
			<guid>https://dev1galaxy.org/viewtopic.php?pid=59868#p59868</guid>
		</item>
		<item>
			<title><![CDATA[Re: [SOLVED] Excalibur and fail2ban]]></title>
			<link>https://dev1galaxy.org/viewtopic.php?pid=57474#p57474</link>
			<description><![CDATA[<p>Ahh, personal attacks. The last refuge of the incompetent. Bye go, I&#039;m done arguing with you.</p><p>Nice one nuking the image BTW, did that land a little close to home?</p>]]></description>
			<author><![CDATA[dummy@example.com (steve_v)]]></author>
			<pubDate>Fri, 22 Aug 2025 04:39:16 +0000</pubDate>
			<guid>https://dev1galaxy.org/viewtopic.php?pid=57474#p57474</guid>
		</item>
		<item>
			<title><![CDATA[Re: [SOLVED] Excalibur and fail2ban]]></title>
			<link>https://dev1galaxy.org/viewtopic.php?pid=57473#p57473</link>
			<description><![CDATA[<p>Congratulations! And the winner of the best problem solver but most disgusting human being award goes to . . . </p><p>(see above post)</p>]]></description>
			<author><![CDATA[dummy@example.com (golinux)]]></author>
			<pubDate>Fri, 22 Aug 2025 04:30:44 +0000</pubDate>
			<guid>https://dev1galaxy.org/viewtopic.php?pid=57473#p57473</guid>
		</item>
		<item>
			<title><![CDATA[Re: [SOLVED] Excalibur and fail2ban]]></title>
			<link>https://dev1galaxy.org/viewtopic.php?pid=57468#p57468</link>
			<description><![CDATA[<div class="quotebox"><blockquote><div><p>maybe you are getting paid for your efforts.</p></div></blockquote></div><div class="quotebox"><blockquote><div><p>You have worn out you welcome and good will here</p></div></blockquote></div><p>I have posted the information required to solve the OPs problem, because nobody else was doing that. As a result, this thread is now [SOLVED].<br />What did you contribute here?</p>]]></description>
			<author><![CDATA[dummy@example.com (steve_v)]]></author>
			<pubDate>Fri, 22 Aug 2025 03:27:17 +0000</pubDate>
			<guid>https://dev1galaxy.org/viewtopic.php?pid=57468#p57468</guid>
		</item>
		<item>
			<title><![CDATA[Re: [SOLVED] Excalibur and fail2ban]]></title>
			<link>https://dev1galaxy.org/viewtopic.php?pid=57461#p57461</link>
			<description><![CDATA[<p>You certainly don&#039;t! We seem to be your favorite punching bag. Or maybe you are getting paid for your efforts. Or maybe you are just a pathological SOB. Please just go somewhere else. You have worn out you welcome and good will here, IMO.</p>]]></description>
			<author><![CDATA[dummy@example.com (golinux)]]></author>
			<pubDate>Fri, 22 Aug 2025 00:24:59 +0000</pubDate>
			<guid>https://dev1galaxy.org/viewtopic.php?pid=57461#p57461</guid>
		</item>
		<item>
			<title><![CDATA[Re: [SOLVED] Excalibur and fail2ban]]></title>
			<link>https://dev1galaxy.org/viewtopic.php?pid=57459#p57459</link>
			<description><![CDATA[<div class="quotebox"><cite>ralph.ronnquist wrote:</cite><blockquote><div><p>It looks like there you have a task to volunteer for.</p></div></blockquote></div><p>You mean giving the forum autoresponder gramophone a whack, because it&#039;s stuck again?</p><div class="quotebox"><cite>zapper wrote:</cite><blockquote><div><p>licensing problem?</p></div></blockquote></div><p>There is no &quot;licencing problem&quot;. Some APIs were deprecated or moved to external packages, that is all.</p><div class="quotebox"><cite>zapper wrote:</cite><blockquote><div><p>Asking...</p></div></blockquote></div><p>But apparently not <em>reading</em>, because g4sra already explained that.</p><p>As usual, a bunch of whinging and finger pointing about &quot;them&quot;, &quot;forced&quot; changes, &quot;clusterfuck&quot; upstreams, and a bit of misdirection regarding &quot;awful licence changes&quot;... <br />While the real problem is right in our back yard, and has nothing to do with any of the favourite punching-bags. Nothing ever changes around here, does it?</p>]]></description>
			<author><![CDATA[dummy@example.com (steve_v)]]></author>
			<pubDate>Thu, 21 Aug 2025 23:55:23 +0000</pubDate>
			<guid>https://dev1galaxy.org/viewtopic.php?pid=57459#p57459</guid>
		</item>
		<item>
			<title><![CDATA[Re: [SOLVED] Excalibur and fail2ban]]></title>
			<link>https://dev1galaxy.org/viewtopic.php?pid=57454#p57454</link>
			<description><![CDATA[<p>@g4sra</p><p>But which package has the licensing problem? And if its python itself, say so.</p><p>If so, does this mean python has a problematic license like rust or java?</p><p>Asking...</p>]]></description>
			<author><![CDATA[dummy@example.com (zapper)]]></author>
			<pubDate>Thu, 21 Aug 2025 20:12:10 +0000</pubDate>
			<guid>https://dev1galaxy.org/viewtopic.php?pid=57454#p57454</guid>
		</item>
		<item>
			<title><![CDATA[Re: [SOLVED] Excalibur and fail2ban]]></title>
			<link>https://dev1galaxy.org/viewtopic.php?pid=57444#p57444</link>
			<description><![CDATA[<div class="quotebox"><blockquote><div><p>@OP, make sure all your jails are using the &#039;polling&#039;, &#039;pyinotify&#039; (if you have that installed) or &#039;auto&#039; backends.</p></div></blockquote></div><p>I had my backends set to &quot;auto&quot;, and I even tried &quot;polling&quot;.&#160; I have not tried &quot;pyinotify&quot; yet, but if it works, I will report back here.</p><p>EDIT:&#160; I installed </p><div class="quotebox"><blockquote><div><p>apt install python3-pyinotify</p></div></blockquote></div><p> and it worked!&#160; </p><p>In my jail.local file I have the backend set at:</p><div class="quotebox"><blockquote><div><p>backend = auto</p></div></blockquote></div><p>Maybe the package does not need to be rebuilt, yet, but when this issue comes up again with someone else, pass the word about a missing dependency in devuan &quot;python3-pyinotify&quot;</p><div class="quotebox"><blockquote><div><p>root@fc-vm:/home/niXer# service fail2ban status<br />Status of Authentication failure monitor: fail2ban is running.</p><p>root@fc-vm:/home/niXer# lsb_release -a<br />No LSB modules are available.<br />Distributor ID:&#160; &#160; Devuan<br />Description:&#160; &#160; Devuan GNU/Linux 6 (excalibur/ceres)<br />Release:&#160; &#160; 6<br />Codename:&#160; &#160; excalibur ceres</p><p>root@fc-vm:/home/niXer# apt policy fail2ban<br />fail2ban:<br />&#160; Installed: 1.1.0-8<br />&#160; Candidate: 1.1.0-8<br />&#160; Version table:<br /> *** 1.1.0-8 500<br />&#160; &#160; &#160; &#160; 500 <a href="http://gnlug.org/pub/devuan/merged" rel="nofollow">http://gnlug.org/pub/devuan/merged</a> excalibur/main amd64 Packages<br />&#160; &#160; &#160; &#160; 100 /var/lib/dpkg/status</p><p>root@fc-vm:/home/niXer# apt policy python3-pyinotify<br />python3-pyinotify:<br />&#160; Installed: 0.9.6-5<br />&#160; Candidate: 0.9.6-5<br />&#160; Version table:<br /> *** 0.9.6-5 500<br />&#160; &#160; &#160; &#160; 500 <a href="http://gnlug.org/pub/devuan/merged" rel="nofollow">http://gnlug.org/pub/devuan/merged</a> excalibur/main amd64 Packages<br />&#160; &#160; &#160; &#160; 100 /var/lib/dpkg/status</p></div></blockquote></div>]]></description>
			<author><![CDATA[dummy@example.com (nixer)]]></author>
			<pubDate>Thu, 21 Aug 2025 18:00:26 +0000</pubDate>
			<guid>https://dev1galaxy.org/viewtopic.php?pid=57444#p57444</guid>
		</item>
		<item>
			<title><![CDATA[Re: [SOLVED] Excalibur and fail2ban]]></title>
			<link>https://dev1galaxy.org/viewtopic.php?pid=57431#p57431</link>
			<description><![CDATA[<p>It looks like there you have a task to volunteer for.</p>]]></description>
			<author><![CDATA[dummy@example.com (ralph.ronnquist)]]></author>
			<pubDate>Thu, 21 Aug 2025 11:42:37 +0000</pubDate>
			<guid>https://dev1galaxy.org/viewtopic.php?pid=57431#p57431</guid>
		</item>
	</channel>
</rss>
