Re: [Fail2ban-users] How to implement ban using ipset

[Kenneth P. <sh...@se...>]

[replying back on list.]

--On Wednesday, September 02, 2020 12:58 PM -0700 Phillip Carroll 
<pos...@en...> wrote:

> I confess I am not fluent in Python. More like Python illiterate.

I can read it but not well and am pretty new at writing any.

> I notice that my server has both Python2.7 and Python3.6 libs installed.
> However, only 2.7 has ./site-packages/fail2ban.  I assume fail2ban uses
> the 2.7 version.

2.7 is the "system" version. Some packages require 3.6 and will pull that 
in and override the path to take advantage of it.

Most of the fail2ban-server is installed as a library and then invoked from 
a more conventional /usr/bin master script. This seems to be a pattern in 
scripted languages where an app has many script source files.

> I see the line you referred to is the same in my install.  Maybe someone
> else can shed light on whether that line is coded correctly.

I've also got a CentOS 7.x server and am using the distribution package 
from yum. ;)

> As to your earlier question about contents of fail2ban.sqlite3:
> I am a bit rusty on sqlite.

I'm having to look this up as I use it infrequently.

> How do I list tables in main?  I don't get any output from .tables.

I see this:

sqlite> .tables
bans        fail2banDb  jails       logs

How big is your file? Here's what I see on my public server at Linode:

-rw-------.  1 root root 32382976 Sep  2 19:28 fail2ban.sqlite3