Fail2ban Log : 'ipset v7.1: Hash is full, cannot add more elements'

stephdl · February 16, 2020, 4:49pm

In the meanwhile if shorewall restart, it will overwrite your changes

Maybe you could change the line below with your settings

NethServer/nethserver-fail2ban/blob/master/root/etc/e-smith/templates/etc/shorewall/initdone/20fail2ban#L11


{
    # create the ipset jail in iptables
    # no rules if status disabled
    use NethServer::Fail2Ban;
    return "" if ($fail2ban{'status'} ne 'enabled');
    my $bantime= $fail2ban{'BanTime'} || '1800';
    my $perpetual = $fail2ban{'Recidive_Perpetual'} || 'disabled';
    foreach (NethServer::Fail2Ban::listAllJails()) {
    
        if (($_ eq 'recidive') && ($perpetual eq 'enabled')) {
            $OUT .= "system(\"/usr/sbin/ipset -quiet -exist create f2b-recidive hash:ip timeout 0 \");\n";
        } elsif ($_ eq 'recidive') {
            # max ban time for ipset is 2147483 seconds
            $OUT .= "system(\"/usr/sbin/ipset -quiet -exist create f2b-recidive hash:ip timeout 1209600 \");\n";
        } else {
            $OUT .= "system(\"/usr/sbin/ipset -quiet -exist create f2b-$_ hash:ip timeout $bantime \");\n";
        }
    }
    $OUT .= '1;';
}