On 2020-05-06 15:57 BST, Nick wrote: > On 2020-05-06 15:31 BST, Jozsef Kadlecsik wrote: > > Maybe the fail2ban rule is applied both for http and https, while the > > rule with the ipset matching is http only? > > The log file that fail2ban monitors is the log for http requests only. > No other service writes to that log. I was mistaken. Some https requests were in fact getting logged to the same file as for http, and that was my trouble. So this was not an issue with netfilter but my misconfiguration of my web server. -- Nick
