Before the patch I had sshd: [ 1:28 ] [ 25:0 ] 45.64.112.95 0:2 1:0 . . sshd] Increase: [ 1:0 ] [ 0:0 ] 96.1.64.194 1:0 0:0 in the logwatch mail output. I assume it counts as 2 services, so the point of the if is to keep the 2 servicenames. Collapsing the increase bans into rebans is also a possibility, but it would be a better solution to add a value for increases besides reban, as they contain different scenarios. I assume I see this because I try to ban and keep banned more aggressively than the...
Before the patch I had sshd: [ 1:28 ] [ 25:0 ] 45.64.112.95 0:2 1:0 . . sshd] Increase: [ 1:0 ] [ 0:0 ] 96.1.64.194 1:0 0:0 in the logwatch mail output. I assume it counts as 2 services, so the point of the if is to keep the 2 servicenames. Collapsing the increase bans into rebans is also a possibility, but it would be a better solution to add a value for increases besides reban, as they contain different scenarios. I assume I see this because I try to ban and keep banned more aggressively than the...
[fail2ban] Remove superfluous ] from BAN-time increases
It would be preferable to use sshd -T to list the resolved configuration instead of trying to parse the config files.