On 2024-06-20 17:20, Jeff Pang via mailop wrote:
today I clear up iptables rules, and run fail2ban again.
in half of an hour, it blocked 1400+ IPs.

$ sudo iptables -L -n|grep DROP|wc -l
1407

I am afraid too many iptables will slow down the performance of systems.
do you have any suggestion for handling this case?

use the iptables hashtable

or migrate to nftables and use a similar technique

_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Reply via email to