fail2ban iptables missing chains

Virtualmin
1

Hi,

BACKGROUND: I run ubuntu 14.04 and enabled ufw. Because I’m a n00b at virtualmin, I noticed that the iptables settings didn’t show in virtualmin and so I clicked on [Revert Configuration]. What happened is all the ufw chains got imported into the iptables config.

Since there was no easy way to remove all of the ufw-XXX chains (yes, even after ‘ufw disable’)… I went and removed the chains in the UI. Unfortunately, I didn’t notice that I was removing fail2ban chains as well…

(Yes, forehead slaps now…)

So, the problem is the fail2ban.logs:
2015-06-17 00:53:23,138 fail2ban.actions.action: ERROR iptables -D INPUT -p tcp -m multiport --dports ssh -j fail2ban-ssh
iptables -F fail2ban-ssh
iptables -X fail2ban-ssh returned 100
2015-06-17 00:53:23,327 fail2ban.actions.action: ERROR iptables -D INPUT -p tcp -j fail2ban-recidive
iptables -F fail2ban-recidive
iptables -X fail2ban-recidive returned 100

This looked suitably bad, so I ran “iptables -L” at a shell prompt and noticed the extent of the problem I’d made…

The Question:
Does anyone know how to reinstate the standard fail2ban chains in iptables?

Many thanks,
Craig

2

Stop fail2ban, flush iptables, set back rules you want/need, save those rules, restart iptables, start fail2ban.

3

Thanks @ Diabolico.
I did that by accident, by rebooting a few times (for other reasons). It’s great that you listed it out though.