Interesting. I'll have to do something like this as well.
Wayne Sallee
wa...@waynesallee.com
http://www.WayneSallee.com
Original Message
*Subject: * Re: [Fail2ban-users] Cleanup jails
*From: * Kasper Thunø
*To: * Nick Howitt
*CC: *Fail2ban-users
Hi Nick,
Thanks for the suggestion!
I found an approach here (https://github.com/ritsu/ipset-fail2ban) which
seems to be a nice way of cleaning up and using ipset as well.
Den lør. 24. jun. 2023 kl. 17.06 skrev Nick Howitt via Fail2ban-users <
fail2ban-users@lists.sourceforge.net>:
> If you have
If you have a large amount of blocks, and this sounds like it, use
ipset-based jails as they are way more efficient. If you want to ban
subnets each time you get a block it is possible to create an action to
ban a /24 subnet each time with a very slight modification to the
default action (which
Hey,
Just signed up as I was unable to find something explaining an approach to
what I want to achieve.
I have a handful of jail configurations which handle postfix for example.
Inspecting the currently banned ip addresses I see a lot of examples of
entire subnets used to attempt to gain access.
