psad --Status flushes ips

Question

hurricanehrndz opened this issue 8 years ago · 3 comments

Whenever I execute psad --Status it writes to socket the ips, removing them from the block. Why?

Answer 1 · 2016-11-18T18:57:06.000Z

Okay apparently

    iptables auto-blocked IPs:
      x.x.x.x (unlimited timeout)
            [expired timeout, sending cleanup message]

Unlimited timeout. Hmm. So how can unlimited timeout?

Answer 2 · 2016-12-07T01:25:51.000Z

I have reproduced this, will publish a fix soon.

Answer 3 · 2017-02-24T01:35:59.000Z

This has been fixed in psad-2.4.4.