- DietPi-Software | Fail2Ban: From Debian Trixie on, /etc/fail2ban/jail.d/defaults-debian.conf overrides the default ban action with nftables. This makes sense if otherwise the upstream default iptables was used, but it must not override any explicit admin choice or the dietpi-software default "route" action. More importantly, nftables requires the userland tools to be installed, otherwise bans cannot be applied. Installs via dietpi-software will now remove the config, all its other content is redundant, one change even a regression. Next DietPi update and our Trixie upgrade script will either remove the config, if it overrides an explicit choice, or will otherwise assure that nftables userland tools are installed, if it reasonably replaces the legacy iptables ban action.
0 commit comments