18 Mar
2012
18 Mar
'12
2:48 p.m.
Patrick Lists wrote:
Just a wild guess but could it be that fail2ban is trying to resolve all the IP addresses in it's database? Iirc there is a config option called use_dns. Try setting it to "no" or "warn".
Thanks for the suggestion. But I couldn't find any option like that anywhere below /etc/fail2ban in fail2ban-0.8.4-28.el6 .
More info on the wiki: http://www.fail2ban.org/wiki/index.php/Hostnames_or_IP_Addresses
Thanks very much. I'll see if changing the logfile has any effect, and if it doesn't I'll add "use_dns = no" to the config file.
--
Timothy Murphy
e-mail: gayleard /at/ eircom.net
tel: +353-86-2336090, +353-1-2842366
s-mail: School of Mathematics, Trinity College Dublin