Skip to content

[Bug] Fail2Ban rules are cleared after modifying the firewall #13227

Description

@likecutie

Contact Information

No response

1Panel Version

v2.2.3

Problem Description

如题,应该是调用了 reload,导致先清空,但并没有添加回规则,fail2ban 只设置了 PartOf,只能监听 firewall 的 stop 和 restart,所以,总不能每次修改完防火墙都去重启吧,总有一两次会忘记,而且还有用户不知道这个 bug。

Image

Steps to Reproduce

查看当前规则

[qc@Public ~]$ sudo firewall-cmd --direct --get-all-rules
ipv4 filter INPUT_direct 0 -p tcp -m multiport --dports 22 -m set --match-set f2b-sshd src -j REJECT --reject-with icmp-port-unreachable

修改防火墙
再次查看规则

[qc@Public ~]$ sudo firewall-cmd --direct --get-all-rules
[qc@Public ~]$ sudo systemctl restart fail2ban
[qc@Public ~]$ sudo firewall-cmd --direct --get-all-rules
ipv4 filter INPUT_direct 0 -p tcp -m multiport --dports 22 -m set --match-set f2b-sshd src -j REJECT --reject-with icmp-port-unreachable

The expected correct result

No response

Related log output

Additional Information

No response

Metadata

Metadata

Type

No type

Fields

No fields configured for issues without a type.

Projects

No projects

Relationships

None yet

Development

No branches or pull requests

Issue actions