fail2ban IP block never work

haris

Hi, how to block a single IP using the fail2ban plugin? I think I already did the right steps...

Input the IP 1 per line in the Black IP box.
Reload the fail2ban service using the settings.

I tested using a vpn IP on the Black IP section, but the IP can still access any domain on the server. Tested on separated aapanel 706 & 708 on arm & intel vps. Running ubuntu 20. Install & reinstall the plugin still does not block the required IP. I dont use aawaf etc.

Is it just me? or i've setup it wrongly?

aaPanel_Kern

Hello, does the domain name use CDN or CloudFlare?
fail2ban checks based on the source IP. If CloudFlare is used, it cannot be checked.
haris

haris

aaPanel_Kern
Not using cloudflare. Domain pointed to the vps using DNS only A records, no proxy. In the webserver access log, it logs the real vpn IP.

aaPanel_Kern

What is your operating system and what version? Do you want to enable the system firewall?

haris

aaPanel_Kern
the sys firewall is enabled but it's also not blocking any IP. I use ubuntu 20 on arm64 vps.

aaPanel_Kern

haris
Hi, can you give us your aapanel information? The server makes a snapshot backup first, if possible, please send it to kern@aapanel.com.
It is recommended to fill in the following
Post link:
SSH IP address, account password and port:
aapanel login link address and account password:
Detailed problem description:

No post link will not be able to know which user's information is, and the problem will not be processed

haris

aaPanel_Kern
does the sys firewall requires ufw or firewalld in order to work? or it will also work with just iptables? without ufw/firewalld.

aaPanel_Kern

It should be supported

haris