On Tue, 20 Oct 2015, Kenneth Porter wrote:
> Date: Tue, 20 Oct 2015 23:58:14
> From: Kenneth Porter <[email protected]>
> To: [email protected]
> Subject: Re: [Fail2ban-users] IPTables error
> 
> On 10/20/2015 2:20 PM, Richard Nairn wrote:
>> I am getting an error starting up iptables now. It seems to be running
>> iptables with a bad flag "-w":
> No solution, but I was unaware of the -w flag. I found it got added in
> 2013 to deal with parallel invocations of iptables trampling each other:
> http://git.netfilter.org/iptables/commit/?id=93587a04d0f2511e108bbc4d87a8b9d28a5c5dd8

There is an alternative to the -w flag; see here:
http://yalis.fr/cms/index.php/post/2014/11/02/Migrate-from-DenyHosts-to-Fail2ban

The alternative is to use the lockfile-progs.
Cheers,

Yves.

> The optional time delay argument to -w was added in 2014:
> http://www.spinics.net/lists/netfilter-devel/msg31949.html

------------------------------------------------------------------------------
_______________________________________________
Fail2ban-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fail2ban-users

Reply via email to