If it is anything like I found on ClearOS 7.x (similar to Centos 7.x), I
had problems with the iptables-ipset-proto6-allports action but not the
iptables-ipset-proto6 action and the only way to specify the bantime,
overriding the default one in the action was to use a jail with:
action = iptabl
Hi Bill, thanks a lot for the hint.
I didn't mean to, but indeed it is 600 for postfix-sasl as opposing to sshd
which is 172800
For sshd it matches the 2d bantime configured.
[sshd]
enabled = true
port = ssh
bantime = 2d
findtime = 8h
#action = firewallcmd-ipset
logpath = %(sshd_l
Did you mean to set the timeout on f2b-postfix-sasl to ten minutes (600)? These
will count down and fall off the list without fail2ban knowing. You should see
the
countdown with:
watch ipset -L f2b-postfix-sasl
Bill
On 7/27/2020 9:06 PM, registrati...@itconqueror.com wrote:
Hello List, thank