Thomas Göttgens wrote: > fail2ban will go through all defined logfiles during startup. If they > are large, it will take some time. You may be able to speed that > process up by installing a file alteration monitor like gamut. > fail2ban will use it if it finds it. Thanks very much for your response. I see the logfile is defined in /etc/fail2ban/fail2ban.conf as SYSLOG. This can get very large. I've changed the fail2ban logfile to /var/log/fail2ban.log and will see if that makes any difference. My server is in Italy (where I am at the moment) and I don't think this is the time for electric storms, so hopefully the issue won't arise any day soon! -- Timothy Murphy e-mail: gayleard /at/ eircom.net tel: +353-86-2336090, +353-1-2842366 s-mail: School of Mathematics, Trinity College Dublin