On Monday 26 July 2010 14:19:58 John Novack wrote: > Randy R wrote: > > On Mon, Jul 26, 2010 at 10:36 AM, Brent A. Torrenga<li...@torrenga.com> wrote: > >> I have tried to setup fail2ban on a machine running OpenSuSE 11. > >> Everything looks fine, except the machine restarts the firewall whenever > >> the DHCP lease is renewed, thus flushing all the fail2ban rules (I > >> think…). It seems to me that a quick fix would be to have the system > >> restart fail2ban whenever the firewall is restarted. Has anyone else > >> encountered this issue? …and come up with a solution? > > > > I believe there's a way to make the rules persist in a file. (see the > > fail2ban docs) > > > > /r > > Why isn't the Asterisk box on a static IP on the LAN? That seems to be > asking for trouble using DHCP.
If the LAN is using an RFC-compliant DHCP server (read: not Microsoft), then it makes utterly no difference; as long as the machine is up whenever its lease expires and not too many MAC addresses are on the LAN, then it will always get exactly the same IP. The problem sounds like fail2ban is failing to write the new rules to a permanent file, which would otherwise allow the rules to persist after a reboot. -- Tilghman Lesher Digium, Inc. | Senior Software Developer twitter: Corydon76 | IRC: Corydon76-dig (Freenode) Check us out at: www.digium.com & www.asterisk.org -- _____________________________________________________________________ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us for a live introductory webinar every Thurs: http://www.asterisk.org/hello asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users