On Sat, Apr 9, 2016, at 09:41 AM, Bill Shirley wrote:
> It doesn't really matter what the default timeout is if you send the value 
> from the jail:
> actionban = ipset -exist add fail2ban-<name> <ip> timeout <my_timeout>
> 
> [Init]
> name = Ip
> my_timeout = 3600
> 
> jail:
> [sshd]
> action          = my_ipset_ip[my_timeout=86400]
> 
> [sshd-2]
> action          = my_ipset_ip[my_timeout=12345]
> 

Huh.  I thought I tried that^ and it didn't work.  Re-examining ...

To be clear,

> [Init]
> name = Ip
> my_timeout = 3600

goes in the ACTION, my_ipset_ip.conf

and

> jail:
> [sshd]
> action          = my_ipset_ip[my_timeout=86400]
> 
> [sshd-2]
> action          = my_ipset_ip[my_timeout=12345]

in the jail.local, right?

Jason

------------------------------------------------------------------------------
Find and fix application performance issues faster with Applications Manager
Applications Manager provides deep performance insights into multiple tiers of
your business applications. It resolves application problems quickly and
reduces your MTTR. Get your free trial! http://pubads.g.doubleclick.net/
gampad/clk?id=1444514301&iu=/ca-pub-7940484522588532
_______________________________________________
Fail2ban-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fail2ban-users

Reply via email to