can't install fail2ban or sshguard

[Matus]

Hello,

I'm using qubes os 3.2 with official template fedora 26 minimal. I tried installing fail2ban or sshguard but i get following error:

dnf install fail2ban
Failed to set locale, defaulting to C
Fedora 26 - x86_64 - Updates 10 MB/s | 20 MB 00:01
Puppet Labs PC1 Repository fedora f26 - x86_64 4.0 MB/s | 104 kB 00:00
Qubes OS Repository for VM (updates) 252 kB/s | 62 kB 00:00
Last metadata expiration check: 0:00:00 ago on Wed Feb 14 15:08:25 2018.
Error:
Problem: conflicting requests
- package fail2ban-0.9.7-2.fc26.noarch requires fail2ban-firewalld = 0.9.7-2.fc26, but none of the providers can be installed
- package fail2ban-0.9.6-4.fc26.noarch requires fail2ban-firewalld = 0.9.6-4.fc26, but none of the providers can be installed
- package fail2ban-firewalld-0.9.7-2.fc26.noarch requires firewalld, but none of the providers can be installed
- package fail2ban-firewalld-0.9.6-4.fc26.noarch requires firewalld, but none of the providers can be installed
- problem with installed package qubes-core-vm-3.2.22-1.fc26.x86_64
- package qubes-core-vm-3.2.22-1.fc26.x86_64 conflicts with firewalld provided by firewalld-0.4.4.5-1.fc26.noarch
- package qubes-core-vm-3.2.20-1.fc26.x86_64 conflicts with firewalld provided by firewalld-0.4.4.5-1.fc26.noarch
(try to add '--allowerasing' to command line to replace conflicting packages or '--skip-broken' to skip uninstallable packages)

The qubes-core-vm have conflict with firewalld. Can I resolv this issue somehow or I can't use fail2ban or any other similar tool?

Thank you in advance for any help

[Ivan Mitev]

Qubes uses plain iptables so you shouldn't mess with firewalld.
It looks like you may install only the fail2ban server part [1] ;
otherwise you could install from source or pick the required files from
the rpm.

https://osric.com/chris/accidental-developer/2017/08/using-fail2ban-with-iptables-instead-of-firewalld/

[Matus]

thank you for help. it was exactly as you said. i just installed only fail2ban server package and set it up and it works correctly with iptables.

[Ivan Mitev]

On 02/14/2018 05:42 PM, Matus wrote:
> thank you for help. it was exactly as you said. i just installed only fail2ban server package and set it up and it works correctly with iptables.

you're welcome - happy to read you worked it out.

ivan