linux – fail2ban在重启后保存禁止的ip

禁止数据库在fail2ban.conf中定义,带有两个变量：

# Options: dbfile
# Notes.: Set the file for the fail2ban persistent data to be stored.
#         A value of ":memory:" means database is only stored in memory 
#         and data is lost when fail2ban is stopped.
#         A value of "None" disables the database.
# Values: [ None :memory: FILE ] Default: /var/lib/fail2ban/fail2ban.sqlite3
dbfile = /var/lib/fail2ban/fail2ban.sqlite3

# Options: dbpurgeage
# Notes.: Sets age at which bans should be purged from the database
# Values: [ SECONDS ] Default: 86400 (24hours)
dbpurgeage = 86400

为了避免持久性,现在这是默认值,编辑fail2ban.conf文件,然后更改dbfile =< path>有：

dbfile = None

我不太清楚None和：memory之间的区别是：无论哪种方式,这两者都会阻止IP在重启或重启时重新添加到防火墙.