It gets weirder.
I had a bunch, around 20 or so, of IPs in the ipset still there from my last
post.
In the meantime I got another admin email about IP = 68.64.160.18
Now when I check the ipset I see ONLY that ONE ip
ipset -L fail2ban-zimbra-recipient
Name: fail2ban-zimbra-recipient
Type: hash:ip
Revision: 2
Header: family inet hashsize 1024 maxelem 65536 timeout 600
Size in memory: 18184
References: 1
Members:
68.64.160.18 timeout 581
All the others got wiped out. This time without me doing a thing.
I see that timeout at 581, and if I keep checking it's ticking down to 0.
Is that the bantime? Maybe these are getting unbanned even though I set it
lots longer
one_week = 604800
bantime = %(one_week)s
and it's ignoring my setting?
------------------------------------------------------------------------------
New Year. New Location. New Benefits. New Data Center in Ashburn, VA.
GigeNET is offering a free month of service with a new server in Ashburn.
Choose from 2 high performing configs, both with 100TB of bandwidth.
Higher redundancy.Lower latency.Increased capacity.Completely compliant.
http://p.sf.net/sfu/gigenet
_______________________________________________
Fail2ban-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fail2ban-users
