Subversion Repositories configs

Rev

Rev 4 | Go to most recent revision | Details | Compare with Previous | Last modification | View Log | RSS feed

Rev Author Line No. Line
4 - 1
# Fail2Ban configuration file
2
#
3
# Author: Cyril Jaquier
4
# Modified by Yaroslav Halchenko for multiport banning
5
#
6
 
7
[INCLUDES]
8
 
34 - 9
before = iptables-common.conf
4 - 10
 
11
[Definition]
12
 
13
# Option:  actionstart
14
# Notes.:  command executed once at the start of Fail2Ban.
15
# Values:  CMD
16
#
34 - 17
actionstart = iptables -N f2b-<name>
18
              iptables -A f2b-<name> -j RETURN
19
              iptables -I <chain> -p <protocol> -m multiport --dports <port> -j f2b-<name>
4 - 20
 
21
# Option:  actionstop
22
# Notes.:  command executed once at the end of Fail2Ban
23
# Values:  CMD
24
#
34 - 25
actionstop = iptables -D <chain> -p <protocol> -m multiport --dports <port> -j f2b-<name>
26
             iptables -F f2b-<name>
27
             iptables -X f2b-<name>
4 - 28
 
29
# Option:  actioncheck
30
# Notes.:  command executed once before each actionban command
31
# Values:  CMD
32
#
34 - 33
actioncheck = iptables -n -L <chain> | grep -q 'f2b-<name>[ \t]'
4 - 34
 
35
# Option:  actionban
36
# Notes.:  command executed when banning an IP. Take care that the
37
#          command is executed with Fail2Ban user rights.
38
# Tags:    See jail.conf(5) man page
39
# Values:  CMD
40
#
34 - 41
actionban = iptables -I f2b-<name> 1 -s <ip> -j <blocktype>
4 - 42
 
43
# Option:  actionunban
44
# Notes.:  command executed when unbanning an IP. Take care that the
45
#          command is executed with Fail2Ban user rights.
46
# Tags:    See jail.conf(5) man page
47
# Values:  CMD
48
#
34 - 49
actionunban = iptables -D f2b-<name> -s <ip> -j <blocktype>
4 - 50
 
51
[Init]
52