>
> As I read it none of the events in your log are bans - so recidive would
> ignore them. Here are some ban examples:
> 2020-03-11 14:03:28 streamingbats fail2ban.actions        [1179]: NOTICE
>  [apache] Ban 5.101.0.209
> 2020-03-11 14:11:11 streamingbats fail2ban.actions        [1179]: NOTICE
>  [postfix] Ban 212.200.118.98
> 2020-03-11 14:11:11 streamingbats fail2ban.actions        [1179]: NOTICE
>  [recidive] Ban 212.200.118.98
>

But there are those "already banned" warnings like the following, so why
would the IP have access if it was already banned?

2020-03-11 11:14:38,796 fail2ban.actions        [1539290]: WARNING
[pam-generic] 150.136.217.144 already banned
_______________________________________________
Fail2ban-users mailing list
Fail2ban-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/fail2ban-users

Reply via email to