| 192 |
- |
1 |
# Fail2Ban configuration file
|
|
|
2 |
#
|
| 193 |
- |
3 |
# Authors: Donald Yandt, Sergey G. Brester
|
| 192 |
- |
4 |
#
|
|
|
5 |
# Because of the rich rule commands requires firewalld-0.3.1+
|
|
|
6 |
# This action uses firewalld rich-rules which gives you a cleaner iptables since it stores rules according to zones and not
|
|
|
7 |
# by chain. So for an example all deny rules will be listed under <zone>_deny and all log rules under <zone>_log.
|
|
|
8 |
#
|
|
|
9 |
# Also this action logs banned access attempts so you can filter that and increase ban time for offenders.
|
|
|
10 |
#
|
|
|
11 |
# If you use the --permanent rule you get a xml file in /etc/firewalld/zones/<zone>.xml that can be shared and parsed easliy
|
|
|
12 |
#
|
| 193 |
- |
13 |
# This is an derivative of firewallcmd-rich-rules.conf, see there for details and other parameters.
|
| 192 |
- |
14 |
|
|
|
15 |
[INCLUDES]
|
|
|
16 |
|
| 193 |
- |
17 |
before = firewallcmd-rich-rules.conf
|
| 192 |
- |
18 |
|
|
|
19 |
[Definition]
|
|
|
20 |
|
| 193 |
- |
21 |
rich-suffix = log prefix='f2b-<name>' level='<level>' limit value='<rate>/m' <rich-blocktype>
|
| 192 |
- |
22 |
|
|
|
23 |
[Init]
|
|
|
24 |
|
|
|
25 |
# log levels are "emerg", "alert", "crit", "error", "warning", "notice", "info" or "debug"
|
|
|
26 |
level = info
|
|
|
27 |
|
|
|
28 |
# log rate per minute
|
|
|
29 |
rate = 1
|