On 07/12/2015 02:54 PM, E.B. wrote: >>> I don't care about the past, would be possible to make fail2ban >>> only attach/tail to end of file and monitor starting now so it >>> not need to scann full files on reload? >> >> Using the database (v0.9), it stores the log line position last evaluated >> and restarts there, iirc. > > ok i'll keep eye on it. i was sometimes restarting (not reloading) > so maybe that or the bug i reported with sendmail-whois-ipmatches > was causing the massive startup times > >>> Does installing gamin help this? (can't find any information >>> about benefits of using gamin with fail2ban, any links to >>> read?) >>> >> >> No, the backend determines how fail2ban monitors the files (think tail -f) >> I'd recommend using pyinotify (the default if set to auto and is installed). > > well i see there is also stuff about journalmatch for systemd so i > am very confused what the best backend to use. I can't find docs > about when/why/how to use different beckends. also it looks like > some people using gamin with journalmatch to add to confusion. > Is there somewhere a doc page or a discussion about how each > backend working and merits/weakness of each?
Not so much a benefit or weakness, but if your log file is using journald, you need to use backend=systemd (not sure why it was called that, since systemd defenders often say how they have nothing to do with the other components - journald, in this case). If your log file is a traditional file, I'd suggest using pyinotify. > > > ------------------------------------------------------------------------------ > Don't Limit Your Business. Reach for the Cloud. > GigeNET's Cloud Solutions provide you with the tools and support that > you need to offload your IT needs and focus on growing your business. > Configured For All Businesses. Start Your Cloud Today. > https://www.gigenetcloud.com/ > _______________________________________________ > Fail2ban-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/fail2ban-users > ------------------------------------------------------------------------------ Don't Limit Your Business. Reach for the Cloud. GigeNET's Cloud Solutions provide you with the tools and support that you need to offload your IT needs and focus on growing your business. Configured For All Businesses. Start Your Cloud Today. https://www.gigenetcloud.com/ _______________________________________________ Fail2ban-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/fail2ban-users
