linux – fail2ban在重启后保存禁止的ip

重启后可以在fail2ban中保存和使用_already禁用的IP(fail2ban或整个服务器)？

解决方法

截至2016年,这实际上是默认值.不过,它可能在2011年或2012年左右增加.所以你现在无事可做.

禁止数据库在fail2ban.conf中定义,带有两个变量：

# Options: dbfile
# Notes.: Set the file for the fail2ban persistent data to be stored.
#         A value of ":memory:" means database is only stored in memory 
#         and data is lost when fail2ban is stopped.
#         A value of "None" disables the database.
# Values: [ None :memory: FILE ] Default: /var/lib/fail2ban/fail2ban.sqlite3
dbfile = /var/lib/fail2ban/fail2ban.sqlite3

# Options: dbpurgeage
# Notes.: Sets age at which bans should be purged from the database
# Values: [ SECONDS ] Default: 86400 (24hours)
dbpurgeage = 86400

为了避免持久性,现在这是默认值,编辑fail2ban.conf文件,然后更改dbfile =< path>有：

dbfile = None

我不太清楚None和：memory之间的区别是：无论哪种方式,这两者都会阻止IP在重启或重启时重新添加到防火墙.