fail2ban не резолвить домен

map $host $api_deny {
        default 0;
        include /etc/nginx/map/banlist.conf
}
[\code]

ну и потом где надо вставляется.

if ( $api_deny = 1 ) {
    return 403;
}
[\code]

[nginx_429]

enabled = true
filter  = nginx_429
logpath = /var/log/nginx/global.access.log
action  = nginx_429
use_dns  = no
#bantime = 600
#findtime = 600
maxretry = 1

[Definition]

failregex = ^{.*"host": "<HOST>".*"status": 429,.*}$

actionban = IP=<ip> &&
            printf %%b "$IP <daemon_list>\n" >> <file>

actionunban = echo "/^<ip> <daemon_list>$/<br>d<br>w<br>q" | ed <file>

[Init]

file = /tmp/ngx429.tmp

daemon_list = 1;

{"remote_addr": "192.168.1.7","request_time": "0.487","host": "123.qwe.yan.saas","time_local": "23/Sep/2015:16:22:12 +0000","request": "GET /private/api/v2 HTTP/1.1","status": 429,"body_bytes_sent": 4614,"http_referer": "-","http_user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.93 Safari/537.36","http_x_forwarded_for": "-","upstream_name": "upstream_account","upstream_addr": "127.2.0.2:9000","upstream_status": "200"}

2015-09-23 16:22:13,514 fail2ban.filter         [3412]: WARNING Determined IP using DNS Lookup: 123.qwe.yan.saas = ['0.0.0.17']
2015-09-23 16:22:13,515 fail2ban.filter         [3412]: INFO    [nginx_429] Found 0.0.0.17
2015-09-23 16:22:14,255 fail2ban.actions        [3412]: NOTICE  [nginx_429] 0.0.0.17 already banned

diff --git a/fail2ban/server/filter.py b/fail2ban/server/filter.py
index e2da5e7..1b4cb0e 100644
--- a/fail2ban/server/filter.py
+++ b/fail2ban/server/filter.py
@@ -845,6 +845,8 @@ class DNSUtils:
                        if ip and useDns == "warn":
                                logSys.warning("Determined IP using DNS Lookup: %s = %s",
                                        text, ipList)
+               elif useDns == "no":
+                       ipList = [text]
 
                return ipList
        textToIp = staticmethod(textToIp)

diff --git a/fail2ban/server/filter.py b/fail2ban/server/filter.py
index e2da5e7..fae3665 100644
--- a/fail2ban/server/filter.py
+++ b/fail2ban/server/filter.py
@@ -838,7 +838,9 @@ class DNSUtils:
                                ipList.append(plainIPStr)
 
                # If we are allowed to resolve -- give it a try if nothing was found
-               if useDns in ("yes", "warn") and not ipList:
+               if useDns == "no":
+                       ipList = [text]
+               elif useDns in ("yes", "warn") and not ipList:
                        # Try to get IP from possible DNS
                        ip = DNSUtils.dnsToIp(text)
                        ipList.extend(ip)
@@ -846,6 +848,7 @@ class DNSUtils:
                                logSys.warning("Determined IP using DNS Lookup: %s = %s",
                                        text, ipList)
 
+               logSys.error("I am a couch potato and %s, %s, %s" % (text, useDns, ipList))
                return ipList
        textToIp = staticmethod(textToIp)