search

madfordmac / netban

Brute force login detection/prevention across managed public nodes using redis and Elastic for analytics
MIT License
0 stars 0 forks source link

IPSet Math #13

Open madfordmac opened 1 year ago

madfordmac commented 1 year ago

We get a surprising number of ipset failures from the netban.net module. Despite using a netaddr set to track the ban space, it seems like we're trying to double-add or double-remove ranges a lot. Something must be wrong with our set operations.

madfordmac commented 9 months ago

I haven't noticed this as much since switching to nftables instead of old ipset sets. Not ready to close this without more investigation, but this may be fixed.