Subversion Repositories configs

Rev

Rev 5 | Show entire file | Ignore whitespace | Details | Blame | Last modification | View Log | RSS feed

Rev 5 Rev 34
Line 12... Line 12...
12
# If you are running on an older kernel you make need to patch in external
12
# If you are running on an older kernel you make need to patch in external
13
# modules.
13
# modules.
14
 
14
 
15
[INCLUDES]
15
[INCLUDES]
16
 
16
 
17
before = iptables-blocktype.conf
17
before = iptables-common.conf
18
 
18
 
19
[Definition]
19
[Definition]
20
 
20
 
21
actionstart = ipset create fail2ban-<name> hash:ip timeout <bantime>
21
actionstart = ipset create fail2ban-<name> hash:ip timeout <bantime>
22
              firewall-cmd --direct --add-rule ipv4 filter <chain> 0 -p <protocol> -m multiport --dports <port> -m set --match-set fail2ban-<name> src -j <blocktype>
22
              firewall-cmd --direct --add-rule ipv4 filter <chain> 0 -p <protocol> -m multiport --dports <port> -m set --match-set fail2ban-<name> src -j <blocktype>
Line 28... Line 28...
28
actionban = ipset add fail2ban-<name> <ip> timeout <bantime> -exist
28
actionban = ipset add fail2ban-<name> <ip> timeout <bantime> -exist
29
 
29
 
30
actionunban = ipset del fail2ban-<name> <ip> -exist
30
actionunban = ipset del fail2ban-<name> <ip> -exist
31
 
31
 
32
[Init]
32
[Init]
33
 
-
 
34
# Default name of the chain
-
 
35
#
-
 
36
name = default
-
 
37
 
-
 
38
# Option:  port
-
 
39
# Notes.:  specifies port to monitor
-
 
40
# Values:  [ NUM | STRING ]
-
 
41
#
-
 
42
port = ssh
-
 
43
 
-
 
44
# Option:  protocol
-
 
45
# Notes.:  internally used by config reader for interpolations.
-
 
46
# Values:  [ tcp | udp | icmp | all ]
-
 
47
#
-
 
48
protocol = tcp
-
 
49
 
33
 
50
# Option:  chain
34
# Option:  chain
51
# Notes    specifies the iptables chain to which the fail2ban rules should be
35
# Notes    specifies the iptables chain to which the fail2ban rules should be
52
#          added
36
#          added
53
# Values:  [ STRING ]
37
# Values:  [ STRING ]