From 60f459e3c4d9f14bcfb259d1d6fb25d783438b42 Mon Sep 17 00:00:00 2001 From: Yaroslav Halchenko Date: Thu, 28 Jul 2011 23:20:23 -0400 Subject: [PATCH] Added a note on diverting logrotate configuration for custom logtarget=SYSLOG (Closes: #631917) --- debian/README.Debian | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/debian/README.Debian b/debian/README.Debian index c4707972..4a5e16aa 100644 --- a/debian/README.Debian +++ b/debian/README.Debian @@ -111,6 +111,16 @@ fail2ban. For this reason there is examples/ipmasq-ZZZzzz|fail2ban.rul file is shipped along to be installed under name ZZZzzz|fail2ban.rul within /etc/ipmasq. +* Interaction with logrotate with custom logtarget + Comment to #631917 + +if you use an alternative logtarget (e.g. SYSLOG) thus not using +/var/log/fail2ban.log you should divert logrotate configuration into +a disabled state, e.g. + +sudo dpkg-divert --rename --divert \ + /etc/logrotate.d/fail2ban.disabled /etc/logrotate.d/fail2ban + Troubleshooting: --------------- @@ -221,4 +231,4 @@ P.S. Anyone is welcome to recommend proper security solution to this issue, such as an alternative to sysklogd which allows better control over users logging to specific facilities (such as AUTH) - -- Yaroslav Halchenko , Thu, 4 Jan 2007 15:18:39 -0500 + -- Yaroslav Halchenko , Thu, 28 Jul 2011 23:19:44 -0400