Re: [Sshguard-users] refilling Iptables "sshguard" chain after reboot/restart

[Mij <mi...@ss...>]

Thanks for the question, this opens the opportunity to clarify that:

1) the blacklist file is currently a binary file, so counting lines (as in "wc -l")
does not necessarily represent the number of "entries" in there.
This should answer your "not all addresses seem blocked" question.

2) people already asked to make it human readable. We'll likely do that
some time soon. At the time, that's not felt like a major itch, but the more
requests we get, the itchier it gets.

3) tj wrote a tool to handle the (binary) blacklist file. We never integrated
it into the distribution pending point 2, but if you're keen enough here it is