It looks like fail2ban is restarting every 15 minutes. It’s causing me issues as well.
I have reverted back to firewall 13.0.51.1 and still have the issue. Not sure what version it was running prior, and not sure how to go back beyond 13.0.51.1.
I also didn’t have much time to look into, i will tomorrow. I can leave a quick peek at what the logs say. I will need to dig into it further to submit a bug issue. Not sure what the logs should look like.
Blockquote2018-05-07 17:30:02,003 fail2ban.server [12096]: INFO Stopping all jails
2018-05-07 17:30:02,487 fail2ban.actions.action[12096]: ERROR iptables -D INPUT -p tcp -m multiport --dports http -j fail2ban-apache-auth
iptables -F fail2ban-apache-auth
iptables -X fail2ban-apache-auth returned 100
2018-05-07 17:30:02,601 fail2ban.jail [12096]: INFO Jail ‘apache-tcpwrapper’ stopped
2018-05-07 17:30:02,991 fail2ban.actions.action[12096]: ERROR iptables -D INPUT -p all -j fail2ban-recidive
iptables -F fail2ban-recidive
iptables -X fail2ban-recidive returned 100
2018-05-07 17:30:03,603 fail2ban.jail [12096]: INFO Jail ‘recidive’ stopped
2018-05-07 17:30:04,487 fail2ban.actions.action[12096]: ERROR iptables -D INPUT -p all -j fail2ban-SIP
iptables -F fail2ban-SIP
iptables -X fail2ban-SIP returned 100
2018-05-07 17:30:04,605 fail2ban.jail [12096]: INFO Jail ‘pbx-gui’ stopped
2018-05-07 17:30:05,487 fail2ban.actions.action[12096]: ERROR iptables -D INPUT -p tcp -m multiport --dports http,https -j fail2ban-BadBots
iptables -F fail2ban-BadBots
iptables -X fail2ban-BadBots returned 100
2018-05-07 17:30:05,488 fail2ban.jail [12096]: INFO Jail ‘apache-badbots’ stopped
2018-05-07 17:30:05,996 fail2ban.actions.action[12096]: ERROR iptables -D INPUT -p tcp -m multiport --dports ssh -j fail2ban-SSH
iptables -F fail2ban-SSH
iptables -X fail2ban-SSH returned 100
2018-05-07 17:30:05,997 fail2ban.jail [12096]: INFO Jail ‘ssh-iptables’ stopped
2018-05-07 17:30:06,491 fail2ban.actions.action[12096]: ERROR iptables -D INPUT -p tcp -m multiport --dports ftp -j fail2ban-FTP
iptables -F fail2ban-FTP
iptables -X fail2ban-FTP returned 100
2018-05-07 17:30:06,492 fail2ban.jail [12096]: INFO Jail ‘vsftpd-iptables’ stopped
2018-05-07 17:30:06,493 fail2ban.server [12096]: ERROR Unable to remove PID file: [Errno 2] No such file or directory: ‘/var/run/fail2ban/fail2ban.pid’
2018-05-07 17:30:06,493 fail2ban.server [12096]: INFO Exiting Fail2ban
2018-05-07 17:30:06,703 fail2ban.server [14425]: INFO Changed logging target to /var/log/fail2ban.log for Fail2ban v0.8.14
2018-05-07 17:30:06,704 fail2ban.jail [14425]: INFO Creating new jail ‘recidive’
2018-05-07 17:30:06,705 fail2ban.jail [14425]: INFO Jail ‘recidive’ uses Gamin
2018-05-07 17:30:06,726 fail2ban.jail [14425]: INFO Initiated ‘gamin’ backend
2018-05-07 17:30:06,727 fail2ban.filter [14425]: INFO Added logfile = /var/log/fail2ban.log-20180312
2018-05-07 17:30:06,728 fail2ban.filter [14425]: INFO Added logfile = /var/log/fail2ban.log-20171209
2018-05-07 17:30:06,729 fail2ban.filter [14425]: INFO Added logfile = /var/log/fail2ban.log
2018-05-07 17:30:06,730 fail2ban.filter [14425]: INFO Added logfile = /var/log/fail2ban.log-20171023
2018-05-07 17:30:06,731 fail2ban.filter [14425]: INFO Added logfile = /var/log/fail2ban.log-20180407
2018-05-07 17:30:06,732 fail2ban.filter [14425]: INFO Set maxRetry = 20
2018-05-07 17:30:06,734 fail2ban.filter [14425]: INFO Set findtime = 86400
2018-05-07 17:30:06,735 fail2ban.actions[14425]: INFO Set banTime = 604800
2018-05-07 17:30:06,751 fail2ban.jail [14425]: INFO Creating new jail ‘ssh-iptables’
2018-05-07 17:30:06,751 fail2ban.jail [14425]: INFO Jail ‘ssh-iptables’ uses Gamin
2018-05-07 17:30:06,752 fail2ban.jail [14425]: INFO Initiated ‘gamin’ backend
2018-05-07 17:30:06,753 fail2ban.filter [14425]: INFO Added logfile = /var/log/secure
2018-05-07 17:30:06,754 fail2ban.filter [14425]: INFO Set maxRetry = 3
2018-05-07 17:30:06,756 fail2ban.filter [14425]: INFO Set findtime = 600
2018-05-07 17:30:06,757 fail2ban.actions[14425]: INFO Set banTime = 86400