Intrusion Detection Custom Whitelist Hostname Error

[erivas (Estefania)]

Hi,
I have recently had Intrusion Detection Sync enabled and it looks like there’s an invalid entry in my custom entries ,but I am not getting a delete button to remove it.
I am also getting the warning message “Hostname “/32”, IP address not resolved” due to this.

When I run the “fail2ban-client get ssh-iptables ignoreip” and “fail2ban-client get asterisk-iptables ignoreip” I am not seeing this, so I am not sure how to get rid of it.

Can you please let me know if there is any other way to check and remove this?

Thanks!

Estefania

[franckdanard]

Check /etc/hosts if something is wrong here.
I haven’t worked on this module for two or three years.
If I remember correctly, a logic scans this file including the IP address as trusted here.

[franckdanard]

Have you tried setting a host somewhere instead of an IP address?

[erivas (Estefania)]

Hi @franckdanard,

The “Add etc/hosts as Trusted” setting is Enabled. Should I disable this?

Thanks,

Estefania

[franckdanard]

As you want.
If everything you set here is trusted, then you can.Otherwise, you can disabled it.

[erivas (Estefania)]

I ran “fwconsole firewall sync” and the error disappeared. Not sure if this did it, but I don’t see that entry anymore.
Thanks for your help.

[franckdanard]

fwconsole firewall sync is performed automatically with a task or if you save intrusion detection.