fail2ban plugin issue

krrish

i want to add rule for snort logs
but fail2ban failed to work

nano /etc/fail2ban/filter.d/snort.conf
[Definition]
failregex = ^\S+\s+[**] [\d+:\d+:\d+] .* [Priority: \d+] .* {(?P<proto>\S+)} (?P<host>\d+.\d+.\d+.\d+):\d+ -> .*
ignoreregex =

nano /etc/fail2ban/jail.local

[snort]
enabled = true
filter = snort
logpath = /var/log/snort/snort.alert.fast
maxretry = 1
bantime = 3600
findtime = 600
backend = polling
action = iptables[name=Snort, port=all, protocol=all]

fail2ban.service - Fail2Ban Service
Loaded: loaded (/lib/systemd/system/fail2ban.service; enabled; vendor preset: enabled)
Active: deactivating (stop) since Mon 2025-02-03 04:50:26 EET; 15s ago

krrish

[snort]
enabled = true
filter = snort
maxretry = 10
bantime = 3600
findtime = 600
action = f1e1e607efb658fa98f3d0e79b9d8f6f
logpath = /var/log/snort/snort.alert.fast

root@host:~# systemctl restart fail2ban
root@host:~# systemctl status fail2ban
× fail2ban.service - Fail2Ban Service
Loaded: loaded (/lib/systemd/system/fail2ban.service; enabled; vendor preset: enabled)
Active: failed (Result: exit-code) since Mon 2025-02-03 04:55:11 EET; 2s ago
Docs: man:fail2ban(1)
Process: 11493 ExecStartPre=/bin/mkdir -p /run/fail2ban (code=exited, status=0/SUCCESS)
Process: 11494 ExecStart=/www/server/panel/pyenv/bin/fail2ban-server -xf start (code=exited, status=255/EXCEPTION)
Main PID: 11494 (code=exited, status=255/EXCEPTION)
CPU: 330ms

Feb 03 04:55:10 host systemd[1]: Starting Fail2Ban Service...
Feb 03 04:55:10 host systemd[1]: Started Fail2Ban Service.
Feb 03 04:55:10 host fail2ban-server[11494]: Server ready
Feb 03 04:55:11 host systemd[1]: fail2ban.service: Main process exited, code=exited, status=255/EXCEPTION
Feb 03 04:55:11 host systemd[1]: fail2ban.service: Failed with result 'exit-code'.