fail2ban GC.
-
fail2ban GC.
Over the years I've accumulated thousands of fail2ban regexps. It's a performance impact. Is there some way to figure out which ones have not been hit in a while, to remove?
https://jwz.org/b/yk1e -
undefined oblomov@sociale.network shared this topic on
-
fail2ban GC.
Over the years I've accumulated thousands of fail2ban regexps. It's a performance impact. Is there some way to figure out which ones have not been hit in a while, to remove?
https://jwz.org/b/yk1eWelp, after my spamnesty, including a restructuring of my fail2ban jails and drastic reduction in the number of regexps being processed, performance was pretty good for a while. But in the last 8 days I've already put a 30 day ban on over *1.6 million* IPs that hit the honeypot. And now fail2ban is using a bunch of CPU again. fail2ban.sqlite3 is 2.5G.
We used to be an internet.