View Single Post
  #8  
Old 19th November 2008, 20:37
frank2 frank2 is offline
Junior Member
 
Join Date: Nov 2008
Posts: 6
Thanks: 0
Thanked 1 Time in 1 Post
Default

Quote:
2008-11-19 12:29:10,864 fail2ban.actions: WARNING [postfix] 69.80.173.91 already banned
2008-11-19 12:29:10,873 fail2ban.actions: WARNING [postfix-spamers550] Ban 65.79.158.205
2008-11-19 12:29:10,892 fail2ban.actions: WARNING [postfix-spamers550] 69.80.173.91 already banned
2008-11-19 12:29:15,861 fail2ban.actions: WARNING [postfix] 69.80.173.91 already banned
2008-11-19 12:29:15,889 fail2ban.actions: WARNING [postfix-spamers550] 69.80.173.91 already banned
2008-11-19 13:09:11,893 fail2ban.actions: WARNING [postfix-spamers550] Unban 122.54.251.168
2008-11-19 13:09:12,861 fail2ban.actions: WARNING [postfix] Unban 122.54.251.168
2008-11-19 13:10:47,877 fail2ban.actions: WARNING [postfix] Unban 69.80.173.91
2008-11-19 13:10:47,913 fail2ban.actions: WARNING [postfix-spamers550] Unban 69.80.173.91
2008-11-19 13:10:50,893 fail2ban.actions: WARNING [postfix] Unban 65.79.158.205
2008-11-19 13:10:50,929 fail2ban.actions: WARNING [postfix-spamers550] Unban 65.79.158.205
2008-11-19 13:37:50,913 fail2ban.actions: WARNING [postfix] Ban 88.247.97.206
2008-11-19 13:37:50,945 fail2ban.actions: WARNING [postfix-spamers550] Ban 88.247.97.206
2008-11-19 14:09:20,929 fail2ban.actions: WARNING [postfix] Ban 92.80.0.52
2008-11-19 14:09:20,965 fail2ban.actions: WARNING [postfix-spamers550] Ban 92.80.0.52
2008-11-19 14:17:57,945 fail2ban.actions: WARNING [postfix] Ban 186.9.27.132
2008-11-19 14:17:57,981 fail2ban.actions: WARNING [postfix-spamers550] Ban 186.9.27.132
2008-11-19 14:19:30,961 fail2ban.actions: WARNING [postfix] Unban 88.247.97.206
2008-11-19 14:19:30,997 fail2ban.actions: WARNING [postfix-spamers550] Unban 88.247.97.206
as you can see roughly its banning alot of traffic that normaly hits me hard .. always seems like 20 bots are hitting me at once .. now they are being stopped after a few tries. and as you can see on the already banned msgs that having it longer then 10 mins (the default ) is pretty important. I am watching it closly. I added more domains to this today so I am watching randomly greping to see if it looks ligit or not ..

Anyone know how long I could hold the data .. I don't want to hold forever just at most a day or so but I also don't want to crash fail2ban might not be ment for it.. i will have to do some more reading on this wounderful tool
Reply With Quote