重启后可以在fail2ban中保存和使用_already禁用的IP(fail2ban或整个服务器)？
解决方法
截至2016年,这实际上是默认值.不过,它可能在2011年或2012年左右增加.所以你现在无事可做.
禁止数据库在fail2ban.conf中定义,带有两个变量：
# Options: dbfile # Notes.: Set the file for the fail2ban persistent data to be stored. # A value of ":memory:" means database is only stored in memory # and data is lost when fail2ban is stopped. # A value of "None" disables the database. # Values: [ None :memory: FILE ] Default: /var/lib/fail2ban/fail2ban.sqlite3 dbfile = /var/lib/fail2ban/fail2ban.sqlite3 # Options: dbpurgeage # Notes.: Sets age at which bans should be purged from the database # Values: [ SECONDS ] Default: 86400 (24hours) dbpurgeage = 86400
为了避免持久性,现在这是默认值,编辑fail2ban.conf文件,然后更改dbfile =< path>有：
dbfile = None
我不太清楚None和：memory之间的区别是：无论哪种方式,这两者都会阻止IP在重启或重启时重新添加到防火墙.
