[BR]: Warning at startup: fail2ban.configreader [7602]: WARNING 'allowipv6' not defined in 'Definition'. Using default one: 'auto'

[sbraz]

Environment:

• Fail2Ban version : 1.0.2
• OS, including release name/version : Gentoo unstable ~amd64
• Fail2Ban installed via OS/distribution mechanisms
• You have not applied any additional foreign patches to the codebase
• Some customizations were done to the configuration (provide details below is so)

The issue:

When starting fail2ban with a default configuration, warnings appear.

Steps to reproduce

Install fail2ban and start /usr/bin/fail2ban-server.

Expected behavior

No warning appears

Observed behavior

I see 2022-11-26 11:20:55,251 fail2ban.configreader [14118]: WARNING 'allowipv6' not defined in 'Definition'. Using default one: 'auto'.

Any additional information

I worked around the issue by creating a fail2ban.local file with:

[DEFAULT]
allowipv6 = auto

Why is this value commented out in

fail2ban/config/fail2ban.conf

Line 62 in bd6e7ae

#allowipv6 = auto

? Maybe it should be set instead, like other keys such as dbpurgeage.

Configuration, dump and another helpful excerpts

N/A

Any customizations done to /etc/fail2ban/ configuration

None, this is with the default config.

Relevant parts of /var/log/fail2ban.log file:

N/A

Relevant lines from monitored log files:

N/A

[sebres]

Why is this value commented out

Default values are not really needed to be set. I just forgot that there may be warning in that case.
Since I don't think this warning is necessary (and even with info level it would be too much), I'll lower this to a debug level.

[RealBC]

if the warning

fail2ban.configreader [41804]: WARNING 'allowipv6' not defined in 'Definition'. Using default one: 'auto'

seems ugly to you GOTO fail2ban.local (not jail.local like an absent minded person)

solution

sudo cp /etc/fail2ban/fail2ban.conf /etc/fail2ban/fail2ban.local => As @sebres said this is not good

just put the value you want to modifiy..
sudo vim /etc/fail2ban/fail2ban.local

[Definition]
allowipv6 = auto
...
that's it

[sebres]

Yes.
Although, this one ...

sudo cp /etc/fail2ban/fail2ban.conf /etc/fail2ban/fail2ban.local

is not good - please, don't copy stock config files to the local files, they shall only contain the values you want to overwrite.
For details see #3699 (comment) or https://github.com/fail2ban/fail2ban/wiki/Proper-fail2ban-configuration