#994511 fail2ban: clean bullseye intalation fail config default intalled firewall, nftables

Package:
fail2ban
Source:
fail2ban
Submitter:
AngelD
Date:
2021-09-16 22:09:04 UTC
Severity:
normal
#994511#5
Date:
2021-09-16 22:06:43 UTC
From:
To:
I made a clean install of Debian bullseye (netinstall).

fail2ban fail becouse default instalation use iptables, not nftables

I guess the package uses iptables for compatibility, but in clean installations it fails because it does not use nftables.

I don't know if this configuration can be added by default on clean installs in the file /etc/fail2ban/jail.d/defaults-debian.conf the lines:

[DEFAULT]
banaction = nftables-multiport
banaction_allports = nftables-allports