Re: [Fail2ban-users] ignoreip

[Steven H. <ste...@hi...>]

On 03/05/14 03:11, Noel Butler wrote:
> Hi,
>
> Just a quick question, should ignoreip in a specific jail, also include
> the default ignoreip data?
>
> it seems to replace rather than add to, if this is by design (thats
> fine) is there a variable to include the default? like
>
>    ignoreip = $ignoreip some.other.ip  another.ip.addy  ... and so on
>
> if not, perhaps consider this a non urgent feature request?
>
> thanks
>
> Noel

You can achieve this by creating something like:

[DEFAULT]
…
default_ignoreip = 127.0.0.1/8
ignoreip = %(default_ignoreip)s
…

[jail1]
…
ignoreip = %(default_ignoreip)s 192.168.1.0/24 1.2.3.4
…

[jail2]
…
ignoreip = %(default_ignoreip)s 10.11.12.0/24
…


Thanks ☺
-- 
Steven Hiscocks