1 Topic by Athen

  • Athen
  • Member
  • Offline
  • Registered: 2009-12-10
  • Posts: 9

Topic: iptables fail2ban error

Hello and good day.

I did a new install of ubuntu 10.04 LTS server and iredmail. Just performing some test and came across this error when fail2ban bans an ip from ssh. Just a note, I've not made any changes outside of installing iredmail:

Jun  6 09:59:09 zeus fail2ban.actions: WARNING [ssh-iredmail] Ban 172.16.1.178
Jun  6 09:59:09 zeus fail2ban.actions.action: ERROR  iptables -n -L INPUT | grep -q fail2ban-ssh returned 100
Jun  6 09:59:09 zeus fail2ban.actions.action: ERROR  Invariant check failed. Trying to restore a sane environment
Jun  6 09:59:09 zeus fail2ban.actions.action: ERROR  iptables -D INPUT -p tcp --dport ssh -j fail2ban-ssh#012iptables -F fail2ban-ssh#012iptables -X fail2ban-ssh returned 100

Anyone else seen these errors?

Thanks!

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by saturn

  • saturn
  • Member
  • Offline
  • Registered: 2011-05-21
  • Posts: 2

Re: iptables fail2ban error

I have the same problem on ubuntu 10.04 LTS server !
Solution from the second comment does not help https://bugs.launchpad.net/ubuntu/+sour … bug/403808

3 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,088

Re: iptables fail2ban error

If you restarted iptables service, it will clear all chains created by Fail2ban. So you have to restart fail2ban service immediately too.

4 Reply by saturn

  • saturn
  • Member
  • Offline
  • Registered: 2011-05-21
  • Posts: 2

Re: iptables fail2ban error

the following commands helped me:

modprobe xt_tcpudp
modprobe ip_conntrack

I added these modules to autostart and all works fine !