1

Topic: Fail2ban Have not found any log file for sogo jail

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release):     1.3.1
- Deployed with iRedMail Easy or the downloadable installer?  downloadable installer
- Linux/BSD distribution name and version: centos-release-7-8.2003
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? Yes
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

Hi, I keep getting email to my postmaster account saying



2021-02-23 21:05:01,842 fail2ban                [6126]: ERROR   Failed to access socket path: /var/run/fail2ban/fail2ban.sock. Is fail2ban running?
2021-02-23 21:05:01,880 fail2ban                [6132]: ERROR   Failed to access socket path: /var/run/fail2ban/fail2ban.sock. Is fail2ban running?
2021-02-23 21:05:01,918 fail2ban                [6138]: ERROR   Failed to access socket path: /var/run/fail2ban/fail2ban.sock. Is fail2ban running?


I typed --> sudo service fail2ban status
on centos and got this error message


[root@mail log]# sudo service fail2ban status
Redirecting to /bin/systemctl status fail2ban.service
* fail2ban.service - Fail2Ban Service
   Loaded: loaded (/usr/lib/systemd/system/fail2ban.service; enabled; vendor preset: disabled)
   Active: failed (Result: exit-code) since Tue 2021-02-23 16:09:16 WIB; 4h 53min ago
     Docs: man:fail2ban(1)
  Process: 22673 ExecStart=/usr/bin/fail2ban-server -xf start (code=exited, status=255)
  Process: 22672 ExecStartPre=/bin/mkdir -p /run/fail2ban (code=exited, status=0/SUCCESS)
Main PID: 22673 (code=exited, status=255)

Feb 23 16:09:16 mail.sepindo.co.id systemd[1]: Starting Fail2Ban Service...
Feb 23 16:09:16 mail.sepindo.co.id systemd[1]: Started Fail2Ban Service.
Feb 23 16:09:16 mail.sepindo.co.id fail2ban-server[22673]: 2021-02-23 16:09:16,171 fail2ban                [22673]: ERROR   Failed during configuration: Have not found any log file for sogo jail
Feb 23 16:09:16 mail.sepindo.co.id fail2ban-server[22673]: 2021-02-23 16:09:16,175 fail2ban                [22673]: ERROR   Async configuration of server failed
Feb 23 16:09:16 mail.sepindo.co.id systemd[1]: fail2ban.service: main process exited, code=exited, status=255/n/a
Feb 23 16:09:16 mail.sepindo.co.id systemd[1]: Unit fail2ban.service entered failed state.
Feb 23 16:09:16 mail.sepindo.co.id systemd[1]: fail2ban.service failed.


Then I browse file  /etc/fail2ban/jail.d/sogo.local and found this line

"logpath     = /var/log/sogo/sogo.log"

But there is no sogo folder under /var/log/ neither there is sogo.log file.
I only found fail2ban.log resides in /var/log/

Please advise on how to fix this error because I keep receiving that email error message every few minutes even after I stopped fail2ban service. Thank you in advance.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: Fail2ban Have not found any log file for sogo jail

Disable sogo jail in /etc/fail2ban/jail.d/sogo.local.

3

Re: Fail2ban Have not found any log file for sogo jail

ZhangHuangbin wrote:

Disable sogo jail in /etc/fail2ban/jail.d/sogo.local.

Ok will try it and update the result. Thank you.