On 19 March 2014 15:10, Orion Poplawski <orion(a)cora.nwra.com> wrote:
On a default F20 install with that package I had to do the following
to get a minimal ssh jail up and running (this is info for those
following along, not Orion who no doubt knows this)...
In /etc/fail2ban/jail.d/ajil.local
[DEFAULT]
bantime = 3600
banaction = firewallcmd-ipset
backend = systemd
[sshd]
enabled = true
So, it seems to me that at the very least we should set backend =
systemd in the Fedora, else it's not going to work out of the box (or,
more ugly, require rsyslog).
As to the original question I'd favour enabling the firewalld support
in Fedora by default. Anyone disabling (or chosing not to install)
firewalld and installing fail2ban should know enough to configure
things appropriately.
Cheers,
Jonathan