Menu

#76 ignoreip requirements

v1.0 (example)
open
nobody
None
5
2017-12-26
2017-12-25
No

Hi,

I'm running fail2ban 0.9.6-1 on debian 8.10

Don't know whether this is possible or not but I would have the possibility to include files for ignoreip into jail.local

Something like
[DEFAULT]
[INCLUDES]
ignoreip = bing-ips.txt
ignoreip += bell-ips.txt
ignoreip += local-ips.txt

The idea is that I change/add new ips or lists constantly and by now I have a long string of ips on my jail.local which is a nightmare to maintain.

I have a way to do it manually e.g.

cat local-ips.txt bell-ips.txt bing-ips.txt

10.8.60.0/24 127.0.0.1/8 192.168.140.0/24 209.108.18.190/31 70.24.0.0/13 70.48.0.0/13 40.74.0.0/15 40.76.0.0/14 40.80.0.0/12 40.96.0.0/12 40.112.0.0/13 40.120.0.0/14 40.124.0.0/16 40.125.0.0/17 157.54.0.0/15 157.60.0.0/16 157.56.0.0/14

and then paste that into the jail.local ignoreip line to replace what was originally there.

Just an idea. That would be very appreciated.

Another idea. Don't know whether that would work or not:

[DEFAULT]
ignoreip = cat local-ips.txt bell-ips.txt bing-ips.txt

or

[DEFAULT]
ignoreip = cat *-ips.txt

Would any of this be possible?

Discussion

  • mildred ratched

    mildred ratched - 2017-12-25

    Somehow my formatting was lost
    - [DEFAULT] [INCLUDES] and the 3 ignoreip lines were indented to whow they belong to each other
    - my backticks were lost fort the ignoreip = cat commands.

     
  • Serg G. Brester

    Serg G. Brester - 2017-12-26

    the development as well as issue tracker are located on github currently, can you re-open it there?

     
    • mildred ratched

      mildred ratched - 2017-12-26

      Thanks, my mistake. Sorry.

       

Log in to post a comment.