Hi I have a problem, can anyone help me? I created some ftp users in ISPConfig and was ok I could connect, but from yesterday pureftpd started to ban all my connections from this ftp users. When try to connect are banned the ip's from my lan & from external IP's. any sugestions? Regards Mihai
logs fail2ban-log Code: 2014-04-29 16:14:58,208 fail2ban.actions: WARNING [pureftpd] Ban 192.168.1.99 2014-04-29 16:24:58,829 fail2ban.actions: WARNING [pureftpd] Unban 192.168.1.99 System-log Code: Apr 29 17:09:23 server1 pure-ftpd: ([email protected]) [INFO] New connection from 192.168.1.99 Apr 29 17:09:23 server1 pure-ftpd: ([email protected]) [ERROR] The SQL server seems to be down [Access denied for user 'ispconfig'@'127.0.0.1' (using password: YES)] Apr 29 17:09:23 server1 pure-ftpd: ([email protected]) [INFO] PAM_RHOST enabled. Getting the peer address ftp log Code: Connect to: (04/29/2014 17:17:47) hostname=192.168.1.100 username=### startdir=web
Maybe the problem is not with pureftpd nor fail2ban, but with the MySQL server Code: [ERROR] The SQL server seems to be down [Access denied for user 'ispconfig'@'127.0.0.1' (using password: YES)] I'm by far not an expert on ISPConfig, but let's suppose it uses a database for storing the ftp-users' passwords. That would explain why connections can't be established, so then fail2ban executes the rules to ban that IP. I would suggest you to: - remove the bans - stop the fail2ban service - start the mysql daemon - try to connect to the FTP server as usually Tell us later how it has gone.
