On 28 April 2017 at 21:42, Danila Vershinin <cia...@gmail.com> wrote:
> Hi,
>
> I have created a jail and trying to understand how it performs.
> I am puzzled at this output below. Particularly I want to know what “Total
> failed” stands for.
> Does it mean something wrong with the jail or it’s the number of entries
> matched within the log file?
> What is “Currently failed”?
>
> Status for the jail: magento-rss
> |- filter
> | |- File list: /path/to/access.log
> | |- *Currently failed: 0*
> | `- *Total failed: 20780*
> `- action
> |- Currently banned: 16
> | `- IP list: [16 IP addresses]
> `- Total banned: 16
>
I think this is fine. The 'Total failed' is the count of events when a
entry in the log file met the 'fail2ban' test, the 'Total banned' is the
count of occasion when this actually triggered a ban. They are different
because (for instance) maxretry > 1 or if an ip is already banned (probably
in the last second) when a fail event triggered.
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Fail2ban-users mailing list
Fail2ban-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/fail2ban-users
