Thomas Göttgens wrote:
fail2ban will go through all defined logfiles during startup. If they are large, it will take some time. You may be able to speed that process up by installing a file alteration monitor like gamut. fail2ban will use it if it finds it.
Thanks very much for your response. I see the logfile is defined in /etc/fail2ban/fail2ban.conf as SYSLOG. This can get very large. I've changed the fail2ban logfile to /var/log/fail2ban.log and will see if that makes any difference.
My server is in Italy (where I am at the moment) and I don't think this is the time for electric storms, so hopefully the issue won't arise any day soon!