On 11.07.2017 05:12, Matthew Darnell wrote:
We are being hit by IP address - 5.62.61.195

It is being caught by our rules and the hostname is being entered into IPTABLES.

Unfortunately the DNS name does not resolve to the IP address -
r-195-61-62-5.ff.avast.com

Therefore they do not get banned, is there a way to have the <HOST> be
the ip address and not do a reverse lookup?

-Matt


I think fail2ban does always add the IP address to iptables.
If you check the blocked IPs in iptables via command iptables -L it will by default show the host names instead of IP addresses. If you use iptables -L -n it will print the numeric format, meaning it will show the IP address
this way you can check if your IP address got blocked ...

hope this helps ;)

Greetings
Becki

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Fail2ban-users mailing list
Fail2ban-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/fail2ban-users

Reply via email to