How can I configure fail2ban to always allow attempts from the local/NAT ips (ie 192.168.1.*). I have tried putting the following entry into /etc/fail2ban/jail.conf:


# "ignoreip" can be an IP address, a CIDR mask or a DNS host
ignoreip = 192.168.1.*
bantime  = 600
maxretry = 3

but upon restart I had the following warning in my /var/log/fail2ban.log

WARNING Unable to find a corresponding IP address for 192.168.1.*

What's the correct configuration for what I'm trying to do?

Please note that I still wish local host ( to be exempted as well.

Ubuntu 9.04


Shouldn't you add instead of 192.168.1.* ?

  • @emgee how can i add single ip address for allow ??? like (for example) – Kumar Aug 28 '13 at 6:34

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.