Re: How to change fail2ban timeout during reboot in F40?

2024-05-12 Thread Frank Bures

On 2024-05-12 16:11, Anthony Messina wrote:

Of course, you'll want to set something suitable for your system's needs


~]# cat /etc/systemd/system/fail2ban.service.d/timeout.conf
[Service]
TimeoutStopSec=5min



Thanks
Frank

--


--
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


Re: How to change fail2ban timeout during reboot in F40?

2024-05-12 Thread Anthony Messina via users
Of course, you'll want to set something suitable for your system's needs


~]# cat /etc/systemd/system/fail2ban.service.d/timeout.conf 
[Service]
TimeoutStopSec=5min

-- 
Anthony - https://messinet.com

On Sunday, May 12, 2024 3:02:29 PM CDT Frank Bures wrote:
> Hi,
> 
> I was a target of an attack resulting in 1600 banned IP address by
> fail2ban.
 
> When I reboot, f2b tries to unban those IPs but it ultimately times out and
> 
 a large number of IPs becomes orphaned.  They stay in firewalld, but f2b
> does not know about them anymore.
> 
> And indeed
> 
> root@ryzen:/etc/systemd/system# systemctl show fail2ban.service -p 
> TimeoutStopUSec
> 
> TimeoutStopUSec=45s
> 
> How do I increase the 45s timeout to something more suitable?  I was not 
> able to find where in the system is that value set.
> 
> Thanks
> Frank


--
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


How to change fail2ban timeout during reboot in F40?

2024-05-12 Thread Frank Bures

Hi,

I was a target of an attack resulting in 1600 banned IP address by fail2ban.

When I reboot, f2b tries to unban those IPs but it ultimately times out and 
a large number of IPs becomes orphaned.  They stay in firewalld, but f2b 
does not know about them anymore.


And indeed

root@ryzen:/etc/systemd/system# systemctl show fail2ban.service -p 
TimeoutStopUSec


TimeoutStopUSec=45s

How do I increase the 45s timeout to something more suitable?  I was not 
able to find where in the system is that value set.


Thanks
Frank

--


--
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue