Re: [Astlinux-users] Banned Hosts

[Michael K. <li...@mk...>]

> Am 11.08.2018 um 21:33 schrieb Lonnie Abelbeck <li...@lo...>:
> 
> Cody,
> 
> The Status tab -> Adaptive Ban Plugin Status: only shows banned hosts by the adaptive-ban plugin using the current /var/log/messages file.
> 
> Lonnie

BTW: The "messages" file gets rotated (by file size) over time, even if you set "PERSISTLOG=yes".

>> On Aug 11, 2018, at 2:26 PM, Cody Alderson <ald...@gm...> wrote:
>> 
>> Micheal Keuter,
>> 
>> Thank you. Yes, it is the entry in user.conf that I placed. I remember that now. I checked, and it is still present. Does the status screen for banned hosts list all the banned hosts in the log or just a few of them? Just curious. Thank you for the info on permanently blocking IP addresses.
>> 
>> Cody
>> 
>> On Sat, Aug 11, 2018 at 12:20 PM, Michael Keuter <li...@mk...> wrote:
>> 
>> Hi Cody,
>> 
>> the "Banned Hosts list" from the Adaptive Ban Plugin is generated from the entries in the "/var/log/messages" file (like Fail2Ban works too).
>> Usually the log file is deleted on reboot, unless you have manually set "PERSISTLOG=yes" in your "user.conf".
>> 
>> But depending on how your firewall is configured, you can permanently block IP-addresses either in 
>> "/mnt/kd/blocked-hosts" or if you use *.netset blocking-list files in "/mnt/kd/blocklists/blocked-hosts.netset"
>> 
>> https://doc.astlinux.org/userdoc:tt_firewall_external_block_list
>> 
>> Michael

Michael

http://www.mksolutions.info