diff --git a/ChangeLog b/ChangeLog index f087fbf2..b43aac80 100644 --- a/ChangeLog +++ b/ChangeLog @@ -40,6 +40,11 @@ ver. 1.1.1-dev-1 (20??/??/??) - development nightly edition ### New Features and Enhancements * new jail option `skip_if_nologs` to ignore jail if no `logpath` matches found, fail2ban continue to start with warnings/errors, thus other jails become running (gh-2756) +* configuration `ignoreip` and fail2ban-client commands `addignoreip`/`delignoreip` extended with `file:...` syntax + to ignore IPs from file-ip-set (containing IP, subnet, dns/fqdn or raw strings); the file would be read lazy on demand, + by first ban (and automatically reloaded by update after small latency to avoid expensive stats check on every compare); + the entries inside the file can be separated by comma, space or new line with optional comments (text following chars + `#` or `;` after space or newline would be ignored up to next newline) * `action.d/*-ipset.conf`: - parameter `ipsettype` to set type of ipset, e. g. hash:ip, hash:net, etc (gh-3760) * `action.d/firewallcmd-rich-*.conf` - fixed incorrect quoting, disabling port variable expansion diff --git a/fail2ban/server/ipdns.py b/fail2ban/server/ipdns.py index 665bddc6..a485a1b2 100644 --- a/fail2ban/server/ipdns.py +++ b/fail2ban/server/ipdns.py @@ -793,7 +793,7 @@ class FileIPAddrSet(IPAddrSet): return self._shortRepr def __contains__(self, ip): - # check it is uptodate (not often than maxUpdateLatency): + # check it is up-to-date (not often than maxUpdateLatency): if self.fileName: self.load(ifNeeded=True) # inherited contains: