Show threadEugene  Mar 11

@twm Yes, depsite I have a tiny home server and only 3 people are using it — the count of bots, trying to pass over the password protected pages, are only increasing.

Even with fail2ban setting to remove blocked IPs from database after 100 days.

#faill2ban #bots

Dan LangilleDec 4, 2024

Just now, I discovered my #faill2ban actions for pf should be using the -k option.

https://man.freebsd.org/cgi/man.cgi?query=pfctl(8)

"Kill all of the state entries"

This explains why an IP gets banned, but keeps abusing - the `keep state` enables that.

#FreeBSD