Hi everyone,
This is my first visit to the mailing list. I've been configuring
fail2ban on our company servers, everything has been great until today.
While setting up some new SSH login accounts I banned one of our servers
with failed logins.
I have removed the ban;
fail2ban-client set ssh-iptables unbanip 192.168.0.1
which takes the IP address off of the list when I run
fail2ban-client status ssh-iptables
Great!
So today I added the ignoreip = a long old list of servers that I don't
want to be banned.
after restarting the service it automatically bans 192.168.0.1 again
even though I manually removed the ban, added the IP address to the
ignoreip option under [DEFAULTS] and just for good measure i ran
echo "" > /var/log/secure
and removed all of the additional secure logs.
I found after some googling some information about ignoreip not working
in a previous version (8.2?) but I am using 9.0.
yum info fail2ban
Name : fail2ban
Arch : noarch
Version : 0.9
Release : 9.el7
Size : 0.0
Repo : installed
From repo : epel
any help would be much appreciated! I'm loosing hair over this one,
thanks
Michael
------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
from Actuate! Instantly Supercharge Your Business Reports and Dashboards
with Interactivity, Sharing, Native Excel Exports, App Integration & more
Get technology previously reserved for billion-dollar corporations, FREE
http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk
_______________________________________________
Fail2ban-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fail2ban-users