David Smith wrote: 1) all references to clarkpoint.com servers in the ClearOS whitelist config file return as unresolvable.
Those are old DNS names that should be deleted from the whitelist. It's a non-fatal error, but we'll clean those up. Here's the tracker entry.
When Snortsam attempts to release the IPs after a day of blocking it is failing ,and the blocked IPs remain blocked - so the IPtables block list is just growing longer by the day, if I understand correctly.
Hmmm. What does the output from following command look like: