Comments on Installing and Using Fail2ban on Debian 12

Fail2ban monitors log files for login failures and temporarily bans the failure-prone source IP address from accessing the host.

1 Comment(s)

Add comment

Please register in our forum first to comment.

Comments

By: Taleman at: 2024-07-08 12:16:24
Reply  

I noticed logwatch on Debian 12 did not produce the summary report for fail2ban. Seems logwatch code has changed after Debian 11, now --detail must be set to larger than zero. 

I use this command line in /etc/cron.daily/00logwatch:

/usr/sbin/logwatch --output mail --hostname $(hostname -f) --detail 1

I have set MailTo in /etc/logwatch/conf/logwatch.conf.