On 10.04.2022 13:09, Stefan Schantl wrote:
Hello mailing list followers,
Hi Stefan,
it has been done - the port of the well known (ipblacklist) feature from Tim FitzGeorge has been finished.
Now it's time for the final steps. For this I need your help, in testing and giving feedback and/or bug reports. ...
I took a closer look at 'ipblocklist' in the last week and I noticed a few things. Everything seems to work, I'm just curious:
E.g., 'ipblocklist.dat' (IP Address Blocklist Logs) shows a total number of "168 hits" for today (July 21). These are "150 hits" for BLOCKLIST_DE and "18 hits" for SHODAN.
When I look at the IPTables "BLOCKLISTIN" chain I find "614 pkts" for BLOCKLIST_DE_DROP (match-set BLOCKLIST_DE src) and "95 pkts" for SHODAN_DROP (match-set SHODAN src).
Why do these numbers differ? Different time slots?
Best, Matthias