Line 30... |
Line 30... |
30 |
# Fail2ban inserts blacklisted hosts into the f2b-<name> list
|
30 |
# Fail2ban inserts blacklisted hosts into the f2b-<name> list
|
31 |
# and removes them from the list after some time, according to its
|
31 |
# and removes them from the list after some time, according to its
|
32 |
# own rules. The 3600 second timeout is independent and acts as a
|
32 |
# own rules. The 3600 second timeout is independent and acts as a
|
33 |
# safeguard in case the fail2ban process dies unexpectedly. The
|
33 |
# safeguard in case the fail2ban process dies unexpectedly. The
|
34 |
# shorter of the two timeouts actually matters.
|
34 |
# shorter of the two timeouts actually matters.
|
35 |
actionstart = if [ `id -u` -eq 0 ];then iptables -I <chain> -m recent --update --seconds 3600 --name f2b-<name> -j <blocktype>;fi
|
35 |
actionstart = if [ `id -u` -eq 0 ];then <iptables> -I <chain> -m recent --update --seconds 3600 --name f2b-<name> -j <blocktype>;fi
|
36 |
|
36 |
|
37 |
# Option: actionstop
|
37 |
# Option: actionstop
|
38 |
# Notes.: command executed once at the end of Fail2Ban
|
38 |
# Notes.: command executed once at the end of Fail2Ban
|
39 |
# Values: CMD
|
39 |
# Values: CMD
|
40 |
#
|
40 |
#
|
41 |
actionstop = echo / > /proc/net/xt_recent/f2b-<name>
|
41 |
actionstop = echo / > /proc/net/xt_recent/f2b-<name>
|
42 |
if [ `id -u` -eq 0 ];then iptables -D <chain> -m recent --update --seconds 3600 --name f2b-<name> -j <blocktype>;fi
|
42 |
if [ `id -u` -eq 0 ];then <iptables> -D <chain> -m recent --update --seconds 3600 --name f2b-<name> -j <blocktype>;fi
|
43 |
|
43 |
|
44 |
# Option: actioncheck
|
44 |
# Option: actioncheck
|
45 |
# Notes.: command executed once before each actionban command
|
45 |
# Notes.: command executed once before each actionban command
|
46 |
# Values: CMD
|
46 |
# Values: CMD
|
47 |
#
|
47 |
#
|