重启后可以在fail2ban中保存和使用_already禁用的IP(fail2ban或整个服务器)？
解决方法
截至2016年,这实际上是默认值.不过,它可能在2011年或2012年左右增加.所以你现在无事可做.
禁止数据库在fail2ban.conf中定义,带有两个变量：
- # Options: dbfile
- # Notes.: Set the file for the fail2ban persistent data to be stored.
- # A value of ":memory:" means database is only stored in memory
- # and data is lost when fail2ban is stopped.
- # A value of "None" disables the database.
- # Values: [ None :memory: FILE ] Default: /var/lib/fail2ban/fail2ban.sqlite3
- dbfile = /var/lib/fail2ban/fail2ban.sqlite3
- # Options: dbpurgeage
- # Notes.: Sets age at which bans should be purged from the database
- # Values: [ SECONDS ] Default: 86400 (24hours)
- dbpurgeage = 86400
为了避免持久性,现在这是默认值,编辑fail2ban.conf文件,然后更改dbfile =< path>有：
- dbfile = None
我不太清楚None和：memory之间的区别是：无论哪种方式,这两者都会阻止IP在重启或重启时重新添加到防火墙.
