P
P
photosho2021-10-18 13:31:43
linux
photosho, 2021-10-18 13:31:43

Does fail2ban see old server logs?

Tell me, does the fail2ban program process logs packed by the server into "tar.gz" or only the main file? When outputting the status, only "main.log" is specified in the "file list". When the server is restarted, it starts to ban everyone again (the status gives "currently banned: 0") - it seems that the list of banned addresses is not stored anywhere. Theoretically, if he went through the log and banned users, and then I deleted the log, will the users be unbanned?

Answer the question

In order to leave comments, you need to log in

1 answer(s)
A
Alexander Falaleev, 2021-10-18
@suffix_ixbt

Some strange question.
Either in jail.conf or in jail.local, each rule has a logpath entry . Here is the log indicated in this paragraph, such a fail2ban log is being looked at. Certainly "tar.gz" does not process. The list of banned addresses is stored in the logs of fai2lban itself :)

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question