NAME

Ereshkigal::App::Command::clear_retries - Forget unbans still owed to the firewall.

VERSION

Version 0.0.1

SYNOPSIS

# forget every owed unban, on every kur
ereshkigal clear-retries

# just the ones sshd is carrying
ereshkigal clear-retries sshd

# just this one IP, everywhere
ereshkigal clear-retries --ip 1.2.3.4

# and a range, on the one kur
ereshkigal clear-retries blocklist --cidr 1.2.3.0/24

DESCRIPTION

When a ban's sentence runs out but the backend refuses the unban, the kur still drops it from the ban book and hands the firewall side to a retry that backs off until it lands. Those owed unbans show up under unban_retries in the output of banned and are counted by status.

This forgets them. It is the escape hatch for one that will never land, the rule having been removed by hand or the backend having never had it to begin with. Nothing is asked of the firewall, so anything genuinely still banished there stays banished... this only stops the kur from asking.

Which is the thing to be careful of. If the rule really is still in place, forgetting it leaves that address blocked indefinitely with nothing tracking it... it will not appear in banned and no expiry will ever release it. So check banned first, and where the backend is healthy again prefer a plain unban, which asks the firewall to remove the rule for real and settles the debt when it does.

METHODS

The App::Cmd hooks this subcommand supplies... command_names, abstract, description, usage_desc, opt_spec, validate_args, and execute.