From: Harold H. <ha...@ha...> - 2024-08-13 00:05:31
|
When I use fail2ban-client to ban a specific IP, I usually see a 0 or 1 response. I have not been able to find the meaning of this in the documentation. What do these responses mean? THANKS! Harold -- Not sent from an iPhone. |
From: Tim B. <ti...@bo...> - 2024-08-13 12:47:44
|
Hello! Am Montag, dem 12.08.2024 um 15:54 -0700 schrieb Harold Hallikainen via Fail2ban-users: > When I use fail2ban-client to ban a specific IP, I usually see a 0 > or 1 response. I see those when unbanning a specific address. The answer of "1" means that the address was found in my ruleset and unbanned. "0" means the address could not be found and was not unbanned. Hope this helps! Cheers, tim -- There is no character, howsoever good and fine, but it can be destroyed by ridicule, howsoever poor and witless. Observe the ass, for instance: his character is about perfect, he is the choicest spirit among all the humbler animals, yet see what ridicule has brought him to. Instead of feeling complimented when we are called an ass, we are left in doubt. -- Mark Twain, "Pudd'nhead Wilson's Calendar" |
From: Aldo N. <ne...@in...> - 2024-08-14 09:36:06
|
On Tue, August 13, 2024 00:54, Harold Hallikainen via Fail2ban-users wrote: > When I use fail2ban-client to ban a specific IP, I usually see a 0 or 1 > response. I have not been able to find the meaning of this in the > documentation. What do these responses mean? > > THANKS! > > Harold > > Hi, if you receive a "1" output, the IP is regulairly banned because it was not banned before, it was not present in the fail2ban's database. if you receive a "0" output the IP was previously banned and no action is required. bye, Aldo Necci ----------------------------------------- This email was sent using SquirrelMail. https://webmail3.inf.uniroma3.it Web Site: http://www.squirrelmail.org |
From: Harold H. <ha...@ha...> - 2024-08-14 18:28:35
|
On Wed, August 14, 2024 2:17 am, Aldo Necci wrote: > On Tue, August 13, 2024 00:54, Harold Hallikainen via Fail2ban-users > wrote: >> When I use fail2ban-client to ban a specific IP, I usually see a 0 or 1 >> response. I have not been able to find the meaning of this in the >> documentation. What do these responses mean? >> >> THANKS! >> >> Harold >> >> > > Hi, > > if you receive a "1" output, the IP is regulairly banned because > it was not banned before, it was not present in the fail2ban's database. > > if you receive a "0" output the IP was previously banned and no action is > required. > > bye, > Aldo Necci THANKS! I could not find that in any of the documentation (but I may have missed it). My server is getting swamped causing a whole lot of php-fpm to run. I am now running a script every minute that restarts php-fpm if the server load is over 50%. A major source of the load appears to be ByteDance, so another daily script blocks all IP addresses with the ByteDance bot. Next in line appears to be Amazon Web Services. I'm working on blocking them. Harold -- Not sent from an iPhone. |
From: L. V. L. <lv...@om...> - 2024-08-14 19:39:53
|
On Wed, 14 Aug 2024, Harold Hallikainen via Fail2ban-users wrote: > THANKS! I could not find that in any of the documentation (but I may have > missed it). My server is getting swamped causing a whole lot of php-fpm to > run. > Harold, Don't forget the old standby: iptables -I INPUT -s <malicious IP> -j DROP Block an IP until the next reboot (which will clear any transient rules). I use regularly when one of our websites is getting sucked by a bot. Lee |