Re: [SSHGuard-users] use of IPV4_SUBNET

[Chris J. <joh...@as...>]

FYI, I'm using CentOS 8.2 with the same /24 setting, but I get the expected
results. Small sample from "ipset list":

106.12.127.0/24
106.12.129.0/24
106.12.130.0/24
106.12.13.0/24
106.12.131.0/24
106.12.132.0/24
106.12.133.0/24
106.12.134.0/24
106.12.14.0/24
106.12.144.0/24

It could be something Debian related?

Cheers!

Chris


On Mon, Nov 23, 2020 at 9:56 AM jack keradec <cm...@li...> wrote:

> Hello
>
> As a long term user of sshgard, I upgraded my Debian box to version 2.4.1
> which I compiled,
> and use it with Nftables.
> However, I am quite often attacked by Chinese sites who tries different
> addresses on a same
> subnet, say 212.85.42.Z, Z ranging from 120 to 250 (just an example)
> So I put IPV4_SUBNET=24 in my ssguard.conf but to no avail: addresses are
> baned one by one
> instead of a whole subnet 112.85.42.0/24 as I expected.
>
> Am I doing something wrong or ...?
>
> And thanks for your good job !
> Regards
>