Subversion Repositories configs

# Fail2Ban configuration file

#

# NetBSD ipfilter (ipf command) ban/unban

#

# Author: Ed Ravin <eravin@panix.com>

#

#

[Definition]

# Option:  actionstart

# Notes.:  command executed once at the start of Fail2Ban.

# Values:  CMD

#

# enable IPF if not already enabled

actionstart = /sbin/ipf -E

# Option:  actionstop

# Notes.:  command executed once at the end of Fail2Ban

# Values:  CMD

#

# don't disable IPF with "/sbin/ipf -D", there may be other filters in use

actionstop =

# Option:  actioncheck

# Notes.:  command executed once before each actionban command

# Values:  CMD

#

actioncheck =

# Option:  actionban

# Notes.:  command executed when banning an IP. Take care that the

#          command is executed with Fail2Ban user rights.

# Tags:    See jail.conf(5) man page

# Values:  CMD

#

actionban = echo block <blocktype> in quick from <ip>/32 | /sbin/ipf -f -

# Option:  actionunban

# Notes.:  command executed when unbanning an IP. Take care that the

#          command is executed with Fail2Ban user rights.

# Tags:    See jail.conf(5) man page

# Values:  CMD

#

# note -r option used to remove matching rule

actionunban = echo block <blocktype> in quick from <ip>/32 | /sbin/ipf -r -f -

[Init]

# Option: Blocktype

# Notes : This is the return-icmp[return-code] mentioned in the ipf man page section 5. Keep this quoted to prevent

#         Shell expansion. This should be blank (unquoted) to drop the packet.

# Values: STRING

blocktype = "return-icmp(port-unr)"