Subversion Repositories configs

Rev

Rev 34 | Show entire file | Ignore whitespace | Details | Blame | Last modification | View Log | RSS feed

Rev 34 Rev 39
Line 18... Line 18...
18
#          The host command comes from bind9-host package.
18
#          The host command comes from bind9-host package.
19
# Tags:    See jail.conf(5) man page
19
# Tags:    See jail.conf(5) man page
20
# Values:  CMD
20
# Values:  CMD
21
#
21
#
22
actionban = printf %%b "Subject: [Fail2Ban] <name>: banned <ip> from `uname -n`
22
actionban = printf %%b "Subject: [Fail2Ban] <name>: banned <ip> from `uname -n`
23
            Date: `LC_TIME=C date +"%%a, %%d %%h %%Y %%T %%z"`
23
            Date: `LC_ALL=C date +"%%a, %%d %%h %%Y %%T %%z"`
24
            From: <sendername> <<sender>>
24
            From: <sendername> <<sender>>
25
            To: <dest>\n
25
            To: <dest>\n
26
            Hi,\n
26
            Hi,\n
27
            The IP <ip> has just been banned by Fail2Ban after
27
            The IP <ip> has just been banned by Fail2Ban after
28
            <failures> attempts against <name>.\n\n
28
            <failures> attempts against <name>.\n\n
29
            Here is more information about <ip>:\n
29
            Here is more information about <ip> :\n
30
            http://bgp.he.net/ip/<ip>
30
            http://bgp.he.net/ip/<ip>
31
            http://www.projecthoneypot.org/ip_<ip>
31
            http://www.projecthoneypot.org/ip_<ip>
32
            http://whois.domaintools.com/<ip>\n\n
32
            http://whois.domaintools.com/<ip>\n\n
33
            Country:`geoiplookup -f /usr/share/GeoIP/GeoIP.dat "<ip>" | cut -d':' -f2-`
33
            Country:`geoiplookup -f /usr/share/GeoIP/GeoIP.dat "<ip>" | cut -d':' -f2-`
34
            AS:`geoiplookup -f /usr/share/GeoIP/GeoIPASNum.dat "<ip>" | cut -d':' -f2-`
34
            AS:`geoiplookup -f /usr/share/GeoIP/GeoIPASNum.dat "<ip>" | cut -d':' -f2-`
35
            hostname: `host -t A <ip> 2>&1`\n\n
35
            hostname: `host -t A <ip> 2>&1`\n\n
36
            Lines containing IP:<ip> in <logpath>\n
36
            Lines containing IP:<ip> in <logpath>\n
37
            `grep -E '(^|[^0-9])<ip>([^0-9]|$)' <logpath>`\n\n
37
            `grep -E <grepopts> '(^|[^0-9])<ip>([^0-9]|$)' <logpath>`\n\n
38
            Regards,\n
38
            Regards,\n
39
            Fail2Ban" | /usr/sbin/sendmail -f <sender> <dest>
39
            Fail2Ban" | /usr/sbin/sendmail -f <sender> <dest>
40
 
40
 
41
[Init]
41
[Init]
42
 
42
 
Line 45... Line 45...
45
name = default
45
name = default
46
 
46
 
47
# Path to the log files which contain relevant lines for the abuser IP
47
# Path to the log files which contain relevant lines for the abuser IP
48
#
48
#
49
logpath = /dev/null
49
logpath = /dev/null
-
 
50
 
-
 
51
# Number of log lines to include in the email
-
 
52
#
-
 
53
grepopts = -m 1000