Recent content by johnsmallberries

Yes I asked and put in a ticket. Thanks.

I noticed you can't delete a snapshot in QuTS, even by uid 0. You just get a permission denied. Like if you do a zfs snapshost -r dataset@time you won't be able to zfs destroy it, even as admin. Is there a trick to getting it deleted other than calling customer support? I've tried all the usual...

Rather than just editing the ipset, I'm now using : firewall import blacklist filename "somecomment" and to update later: firewall unban comment "somecomment" firewall import blacklist filename "somecomment" However the log cleanup for Skynet seems to take forever (I've let it run more than...

Oh sorry yeah I interpreted his comments in the reverse. So everything works normally. I guess I'll try getting rid of some of the github CDN ranges or just deal with it through fail2ban. I guess the github CDN infrastructure is popular for attacks these days.

That is interesting I had the following and the IP was passed through and eventually hit my fail2ban: 20.102.40.205 is in the Skynet-Blacklist. Maybe something with the router. I rebooted and will monitor further and mention if the blacklisted ips are not getting trapped even thought there is a...

I have skynet 8.0.7 and I also run fail2ban on the hosts. I've noticed recently that a lot of IPs in the gitlab CDN (using the skynet default whitelists) are coming through and getting blocked by fail2ban, even though I have the specific IP already banned in skynet from the abuseipdb list. Am...

If you disable skynet, remove the tagged entries from skynet.ipset, and restart then it clears everything. Dropping the import list into the lists directory doesn't seem to work - it gets cleared out when the lists are updated.

Is that the workflow? I would have to keep the previous list I guess? For example, if I import a list from abuseipdb on the first of the month, and now 3 months later I want to update the list. I don't know which IPs from abuseipdb may no longer be on their list, so you are saying I should keep...

I've looked through the threads but couldn't find the recommended procedure for removing a previously imported blacklist of ips from a file. If I use option 5 or the firewall command to import a list of ip's from a local file, and then later want to update that list, the original ip's are still...