> My style is to keep my old config file and then merge in the changes > and restart after the main install is done. whatever works for you is good with me :-)
> 1. The most substantive thing I notice is that the ignoreip
> configuration setting does not seem to be used--that is, I see no sign
> of it in my iptables -nvL rules. I have that option set, though it's
> set to the same value as the default (I set it before the current
> default was in effect.)
it is considered inside fail2ban without bothering external firewall --
ignoreip's get ignored. If you want to enforce it on the level of
firewall - use fwstart to hardcode them inside the firewall
> 2. You have a number of multi-line options without the \ character in
> the config file. E.g., fwend. Do the later lines actually get used?
> A related question: do the multiple lines of, e.g., fwcheck, all get
> used appropriately?
yes they are used appropriately... if your increase verbosity
level you see them in the logs
> 3. The [EMAIL PROTECTED] should solve the mail problems, but it is
I'm opened for further suggestions (patches are lovely) and wishlist bugs :-)
> 4. The latest Debian changelog entry includes
> Should both of those fwban's be there? It would be more idiomatic to
> delete the "if" after "in case."
thank you for corrections :-) 2nd fwban should be fwunban
I will update the changelog entries
> * Resolved the mistery
> The word is "mystery."
thanks once again :-)
> case, though I think it was (since it's only a warning). To clarify
> this, you might add "defaulting to maxreinits = -1" or whatever the
> default behavior is. As I mentioned, I subsequently edited the
> configuration file and restarted the demon.
Hm... not a bad idea... now you made be to fire up emacs and fix things
up :-) Change will be reflected in the Debian release
Thank you for your feedback
--
.-.
=------------------------------ /v\ ----------------------------=
Keep in touch // \\ (yoh@|www.)onerussian.com
Yaroslav Halchenko /( )\ ICQ#: 60653192
Linux User ^^-^^ [175555]
pgprnYuKAn317.pgp
Description: PGP signature
