Dear Maintainer,
*** Reporter, please consider answering these questions, where
appropriate ***
* What led up to the situation?
I think this is fairly normal host, runs ISPConfig though. I have
modified fail2ban somewhat, but I would say just installed Debian 12
and fail2ban.
* What exactly did you do (or not do) that was effective (or
ineffective)?
Did try to debug, could not find fix.
* What was the outcome of this action?
* What outcome did you expect instead?
*** End of the template - remove these template lines ***
On Debian 10 and 11 hosts the e-mail logwatch generates has section
like this:
--------------------- fail2ban-messages Begin ------------------------
Banned services with Fail2Ban: Bans:Unbans
postfix-sasl: [ 3:3 ]
recidive: [ 88:155]
sshd: [296:296]
---------------------- fail2ban-messages End -------------------------
On Debian 12, that section does not appear.
I have compared settings between hosts, I can not see difference. I
tried to see if fail2ban log format has changed, but they look the
same to me. Troubleshooting on the Debian 12 host with
# logwatch --debug High --service fail2ban
shows logfile with the fail2ban info is read and the filter finds Ban,
Unban etc. lines. With --debug High the resulting e-mail did have
fail2ban-messages section, but still not the summary lines with
numbers of Bans:Unbans.
Is this a known issue, some configuration needs adjustment?
My Debian 12 host is NOT upgraded from Debian 11, it is a fresh
install. I did read Debian 12 Release notes, but can not find it
mentioning logwatch or fail2ban.
--