> > I don't care about the past, would be possible to make fail2ban > > only attach/tail to end of file and monitor starting now so it > > not need to scann full files on reload? > >Using the database (v0.9), it stores the log line position last evaluated >and restarts there, iirc.
ok i'll keep eye on it. i was sometimes restarting (not reloading) so maybe that or the bug i reported with sendmail-whois-ipmatches was causing the massive startup times > > Does installing gamin help this? (can't find any information > > about benefits of using gamin with fail2ban, any links to > > read?) > > > > No, the backend determines how fail2ban monitors the files (think tail -f) >I'd recommend using pyinotify (the default if set to auto and is installed). well i see there is also stuff about journalmatch for systemd so i am very confused what the best backend to use. I can't find docs about when/why/how to use different beckends. also it looks like some people using gamin with journalmatch to add to confusion. Is there somewhere a doc page or a discussion about how each backend working and merits/weakness of each? ------------------------------------------------------------------------------ Don't Limit Your Business. Reach for the Cloud. GigeNET's Cloud Solutions provide you with the tools and support that you need to offload your IT needs and focus on growing your business. Configured For All Businesses. Start Your Cloud Today. https://www.gigenetcloud.com/ _______________________________________________ Fail2ban-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/fail2ban-users
