All of lore.kernel.org
 help / color / mirror / Atom feed
From: Nick <netfilter@acrasis.net>
To: netfilter@vger.kernel.org
Subject: Re: Firewall sometimes leaking [solved]
Date: Sun, 10 May 2020 08:56:05 +0100	[thread overview]
Message-ID: <20200510075605.GB27075@acrasis.net> (raw)
In-Reply-To: <20200506145726.GA9812@acrasis.net>

On 2020-05-06 15:57 BST, Nick wrote:
> On 2020-05-06 15:31 BST, Jozsef Kadlecsik wrote:
> > Maybe the fail2ban rule is applied both for http and https, while the
> > rule with the ipset matching is http only?
> 
> The log file that fail2ban monitors is the log for http requests only.
> No other service writes to that log.

I was mistaken.  Some https requests were in fact getting logged to the
same file as for http, and that was my trouble.  So this was not an
issue with netfilter but my misconfiguration of my web server.
-- 
Nick

      reply	other threads:[~2020-05-10  7:56 UTC|newest]

Thread overview: 4+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2020-05-06 11:24 Firewall sometimes leaking Nick
2020-05-06 14:22 ` Jozsef Kadlecsik
2020-05-06 14:57   ` Nick
2020-05-10  7:56     ` Nick [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20200510075605.GB27075@acrasis.net \
    --to=netfilter@acrasis.net \
    --cc=netfilter@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.