From: Robert Kudyba <rkud...@fordham.edu> Subject: Re: [Fail2ban-users] already banned IP showing over and over in fail2ban.log, recidive not triggered? Date: Wed, 11 Mar 2020 14:28:34 -0400
> But there are those "already banned" warnings like the following, so why > would the IP have access if it was > already banned? > > 2020-03-11 11:14:38,796 fail2ban.actions [1539290]: WARNING > [pam-generic] 150.136.217.144 already banned Probably firewall is not configured properly. Fail2ban banned 150.136.217.144 and triggerd action to make firewall block this address before. But actually status of firewall didn't changed so it blocks this adress. Then inconsistency happend about blocking status between fail2ban and firewall. --- Yasuhiro KIMURA _______________________________________________ Fail2ban-users mailing list Fail2ban-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/fail2ban-users
