I can also confirm that as of Ubuntu 24.04.2 LTS the default fail2ban configuration of backend = systemd
does not seem to work properly for jails monitoring external log files, for example postfix-sasl
. After adding backend = auto
to all jails in /etc/fail2ban/jail.local
, bans immediately started to appear in /var/log/fail2ban.log
.