From owner-freebsd-questions@freebsd.org  Thu Apr 13 22:36:32 2017
Return-Path: <owner-freebsd-questions@freebsd.org>
Delivered-To: freebsd-questions@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 4FD56D3CA0F
 for <freebsd-questions@mailman.ysv.freebsd.org>;
 Thu, 13 Apr 2017 22:36:32 +0000 (UTC)
 (envelope-from dave.mehler@gmail.com)
Received: from mail-wr0-x236.google.com (mail-wr0-x236.google.com
 [IPv6:2a00:1450:400c:c0c::236])
 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
 (Client CN "smtp.gmail.com",
 Issuer "Google Internet Authority G2" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id DF6381FE5
 for <freebsd-questions@freebsd.org>; Thu, 13 Apr 2017 22:36:31 +0000 (UTC)
 (envelope-from dave.mehler@gmail.com)
Received: by mail-wr0-x236.google.com with SMTP id z109so43294924wrb.1
 for <freebsd-questions@freebsd.org>; Thu, 13 Apr 2017 15:36:31 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;
 h=mime-version:from:date:message-id:subject:to;
 bh=G3UnpeQa62OHCTpXb5ILhTxz8Lzg3C1/HnOqnArcms8=;
 b=A9p7CsMU63lDzIdhBz6LHGY+eChFUnmbobQsgCdrYMOprOhMEuri2RUdPueb+fxiNA
 Ekoc9rrDc7eaDP+5fUw50GOZQCLh7bg6QjD2txEAaBaKYRX2aek7XqjkMIKmhimkfgBG
 RhrGtYK+XsC/eEdHFmtpZ6NRnTbXZcLVnADlC/uaXyikkOHCF9Ng3izvHoAEwQ1oTodr
 LCHdSPq9SxErWGA/NYNpVZhHNTx+IYjYW+0Bp9TsNtN5yTc/OPNDdVPbp+KwNoHRnz+/
 x6NWQwAxQZXzKdXGCDIyTVwhKAim5+Ow/PhHABlztGBRGBJbA7lLGBcYTOD0h7OXyze7
 5/Pg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20161025;
 h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
 bh=G3UnpeQa62OHCTpXb5ILhTxz8Lzg3C1/HnOqnArcms8=;
 b=Pp/F11tqnm5LBBG27sMtN6c/gNAYyTP0XSy+AjxMK2tdto1RaMBEvsRs6+hRm78HdU
 zPdaLpKvFZBKvyezAOMlaJtSvDLCr8MQy78NywQwQqCV4YrmJQzt4Yhd1HLlAOxwmKPA
 7CVxZBQ/v0ARUtX9sA6xHyFfiSa5fVj6Z5wH3h4LW/KyXc/xkws7Wbf0xgQZUPQ2liSG
 DbPapKR3tNcEI1ky3Gwq63BwDarq2QjSPraQx/Jse/8hiQHI25yjA6sE9tjCwNoUL/zx
 YkNRDbnw4xF75f3lex7N1D9iXHsMUCybqyPULGT12yjn7WCpCrf5kiHTFts3HaPePIjv
 Qxag==
X-Gm-Message-State: AN3rC/6pxsRtja+KZTLgTY5Z7qagwT4nOMiMauF6AmeoqIOBh30b1uOj
 xxFcdHIv701vsRhsdFpu81QfIw1G/g==
X-Received: by 10.223.133.133 with SMTP id 5mr4696096wrt.83.1492122990034;
 Thu, 13 Apr 2017 15:36:30 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.223.155.18 with HTTP; Thu, 13 Apr 2017 15:36:29 -0700 (PDT)
From: David Mehler <dave.mehler@gmail.com>
Date: Thu, 13 Apr 2017 18:36:29 -0400
Message-ID: <CAPORhP6KRA0E2tfCMs2KATEZGr68vmff2GM6ii3qcXSDzK6GvA@mail.gmail.com>
Subject: fail2ban banning me
To: freebsd-questions <freebsd-questions@freebsd.org>
Content-Type: text/plain; charset=UTF-8
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.23
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions/>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 13 Apr 2017 22:36:32 -0000

Hello,

I've got fail2ban going with pf on a 10.3 system. I am now starting to
have instances of being locked out and the only way to get back in is
to do an out of banned connection via my vps.

For some reason over the past two days fail2ban is banning my remotely
connecting ip address, which is dynamic.

Fail2ban has also banned the system's local external ip address for
example 1.2.3.4 I had added that specific address to the ignoreip line
in jail.local.

Any ideas?

Thanks.
Dave
PS, if anyone else is using fail2ban with pf on a 10.x or 11.x system
i'd like to see your jail configurations and compare them to my own.