From: John F. <jo...@er...> - 2013-06-29 00:01:03
|
I noticed that I wasn't getting any more email from fail2ban, so either there were no attacks or something was wrong. Looking through the logs I guess it was the second of these, because there were still attacks. Fail2ban may have stopped work around the time I got a DOS on named (which I was not blocking previously) so I wonder if the server got overloaded and fail2ban stopped for this reason. I am now blocking also with the named jail. However I wondered if it might not be possible to get some kind of signal that fail2ban is not working. One way of doing this might be to have fail2ban periodically confirm via email which jails it is still monitoring. That way if I stop getting the periodic mails I can start to look into it. John |