- Fail2ban 1.1.1 by @crazy-max in #252
- Fix iptables legacy mode selection on Debian by @Byh0ki in #250
Important
Review the Fail2ban 1.1.1 changelog before upgrading.
Custom actions derived from iptables.conf may need updates for multiple-chain support, including replacing <chain> with $chain and <_ipt_for_proto-iter> with <_ipt-iter> in overridden commands. Existing jail settings such as chain = DOCKER-USER remain supported.
Exim normal mode now excludes several risky rules, which moved to more. Review the upstream guidance before enabling that mode.
With backend = auto, missing log files can now trigger a fallback to systemd when a journal match exists. Set systemd_if_nologs = false for file-only monitoring. Journal monitoring requires the Debian image and mounted host journals.
Both image variants preserve their existing iptables ban actions and backend = auto defaults for SSH and Postfix.
Full Changelog: 1.1.0-r6...1.1.1-r0