Sergey G. Brester

Yes, all the parameters supplied via `fail2ban-client` are simply run-time values (thus not persistent)... For persistent entries there are config-files. But my question was about `ignorecommand`, so why not something...

Come on! It looks like a try to relocate "your" work on our shoulders... :) If seriously I still not understand why you can not provide this self - I...

FWIW, current master implements new feature for `ignoreip` (in c54f1a460355b2e82703de351bd44d67edda61a5): * configuration `ignoreip` (and `fail2ban-client` commands `addignoreip`/`delignoreip`) extended with `file:...` syntax to ignore IPs from file-ip-set (containing IP, subnet, DNS/FQDN...

Shortly: - `fail2ban-client get $jail ignoreip` seems to have an error in case of new file-facility. I'll fix it later; - use tripple `///` (since `file://some/file` would be mistakenly considered...

> Thank you for your reply. I still got the same error. Please read attentive the 1st point of my comment above - **`get ignoreip` has a bug. I'll fix...

Both issues with file-addr-set fixed now in 3ce6f344e3c988306d92982ba6699fa31304a956 and 4e22c20559ea6488bf9a8e84c5f7d8bff5a52c34. Prefix with triple slash (`file:///`) retained for backwards compatibility - 1, 2 or 3 slashes after `file:` resolve absolute file...

> Is this available in the v.1.1.1 beta 0? Yes. However the latest fix, not yet, so you have to use `file:///` (with tripple slash).

FWIW, here is the complete list of commits going to new release: https://github.com/fail2ban/fail2ban/compare/1.1.0...master > If there are blockers delaying a release is there anywhere to track that progress on the...

> Isn't there? Supporting newer OpenSSH should be kinda urgent, no? 1. Please don't confuse release of fail2ban here with the release of fail2ban for your distribution. 2. I spoke...

> but isn't it more efficient to be fixed upstream (here), it is fixed in upstream > than for many maintainers to have to apply the same workarounds? a patch...