Fail2ban not banning for full time it should

readyfireaim

Hello, I have Fail2ban set with:

Ban Time: 1800
Max Ban Time: 10000
checked: ban time is incremented
IPv4 subnet: /24

I see that one subnet has racked up 8388607h 57m 17s of ban time, but they still get back in every few hours. Is this a bug? Is this some configuration parameter I missed?

Thanks!

accolon

readyfireaim Max Ban Time: 10000

IPs are only banned for a maximum time of 10000 seconds, i.e. about 2h 47m.

readyfireaim

accolon

I mathed that out too, but why does the UI show:

Should it be the 10000 or what the UI shows?

accolon

Good point. I guess unbanning doesn’t clear the accumulated ban time for the respective IP/subnet. Not sure if this is a bug or intentional…

Anyway, the “Max. ban time” value is the upper limit, as soon as this value is reached, the IP is automatically unbanned.

readyfireaim

accolon

Thanks for that! I’ll file a bug and update my config. Appreciate your help.