Re: [Fail2ban-users] postfix-sasl lossing banned ips Centos 8 / firewalld / systemd

2020-07-28 Thread Nick Howitt
If it is anything like I found on ClearOS 7.x (similar to Centos 7.x), I had problems with the iptables-ipset-proto6-allports action but not the iptables-ipset-proto6 action and the only way to specify the bantime, overriding the default one in the action was to use a jail with: action = iptabl

Re: [Fail2ban-users] postfix-sasl lossing banned ips Centos 8 / firewalld / systemd

2020-07-28 Thread registrations
Hi Bill, thanks a lot for the hint. I didn't mean to, but indeed it is 600 for postfix-sasl as opposing to sshd which is 172800 For sshd it matches the 2d bantime configured. [sshd] enabled = true port = ssh bantime = 2d findtime = 8h #action = firewallcmd-ipset logpath = %(sshd_l

Re: [Fail2ban-users] postfix-sasl lossing banned ips Centos 8 / firewalld / systemd

2020-07-28 Thread Bill Shirley
Did you mean to set the timeout on f2b-postfix-sasl to ten minutes (600)?  These will count down and fall off the list without fail2ban knowing. You should see the countdown with: watch ipset -L f2b-postfix-sasl Bill On 7/27/2020 9:06 PM, registrati...@itconqueror.com wrote: Hello List, thank