As Bill Shirley, and Mike have pointed out, your bantime, and your find time
needs work.
To test, create the following:
[drupal-auth]
enabled = true
port = http,https
filter = drupal-auth
action = iptables-multiport[name=drupal-auth, port="http,https", protocol=tcp]
#sendmail-whois[name=DRUPAL, [email protected]]
logpath = /var/log/messages
maxretry = 1
findtime = 7776000
bantime = 15552000
Wayne Sallee
[email protected]
http://www.WayneSallee.com
_______________________________________________
Fail2ban-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fail2ban-users
