diff --git a/How-fail2ban-works.md b/How-fail2ban-works.md index 14614c9..79bfbcd 100644 --- a/How-fail2ban-works.md +++ b/How-fail2ban-works.md @@ -123,3 +123,9 @@ Following script shows all failures of all IPs across all jails: lockingopt = ``` + +*** +**[Q]** After Fail2ban starts, I'm not seeing the filter chains I expect as per my configuration +
Answer + +**[A]** Fail2ban will create the filter chains on demand, i.e. as the first bans actually happen. This behaviour was changed in fail2ban 0.10 - prior to that version empty chains were created directly at startup (see also [this SO answer](https://stackoverflow.com/a/68622588/1529709) and [#1742](https://github.com/fail2ban/fail2ban/pull/1742)). \ No newline at end of file