Subversion Repositories configs

Rev

Rev 192 | Show entire file | Ignore whitespace | Details | Blame | Last modification | View Log | RSS feed

Rev 192 Rev 193
Line 24... Line 24...
24 
 
 24 
 
25 
# Option:  actionstart
 25 
# Option:  actionstart
26 
# Notes.:  command executed on demand at the first ban (or at the start of Fail2Ban if actionstart_on_demand is set to false).
 26 
# Notes.:  command executed on demand at the first ban (or at the start of Fail2Ban if actionstart_on_demand is set to false).
27 
# Values:  CMD
 27 
# Values:  CMD
28 
#
 28 
#
29 
actionstart = ipset create <ipmset> hash:ip timeout <default-timeout><familyopt>
 29 
actionstart = ipset create <ipmset> hash:ip timeout <default-ipsettime> <familyopt>
30 
              <iptables> -I <chain> -p <protocol> -m multiport --dports <port> -m set --match-set <ipmset> src -j <blocktype>
 30 
              <iptables> -I <chain> -p <protocol> -m multiport --dports <port> -m set --match-set <ipmset> src -j <blocktype>
31 
 
 31 
 
32 
# Option:  actionflush
 32 
# Option:  actionflush
33 
# Notes.:  command executed once to flush IPS, by shutdown (resp. by stop of the jail or this action)
 33 
# Notes.:  command executed once to flush IPS, by shutdown (resp. by stop of the jail or this action)
34 
# Values:  CMD
 34 
# Values:  CMD
Line 47... Line 47...
47 
# Notes.:  command executed when banning an IP. Take care that the
 47 
# Notes.:  command executed when banning an IP. Take care that the
48 
#          command is executed with Fail2Ban user rights.
 48 
#          command is executed with Fail2Ban user rights.
49 
# Tags:    See jail.conf(5) man page
 49 
# Tags:    See jail.conf(5) man page
50 
# Values:  CMD
 50 
# Values:  CMD
51 
#
 51 
#
52 
actionban = ipset add <ipmset> <ip> timeout <bantime> -exist
 52 
actionban = ipset add <ipmset> <ip> timeout <ipsettime> -exist
53 
 
 53 
 
54 
actionprolong = %(actionban)s
 54 
# actionprolong = %(actionban)s
55 
 
 55 
 
56 
# Option:  actionunban
 56 
# Option:  actionunban
57 
# Notes.:  command executed when unbanning an IP. Take care that the
 57 
# Notes.:  command executed when unbanning an IP. Take care that the
58 
#          command is executed with Fail2Ban user rights.
 58 
#          command is executed with Fail2Ban user rights.
59 
# Tags:    See jail.conf(5) man page
 59 
# Tags:    See jail.conf(5) man page
Line 61... Line 61...
61 
#
 61 
#
62 
actionunban = ipset del <ipmset> <ip> -exist
 62 
actionunban = ipset del <ipmset> <ip> -exist
63 
 
 63 
 
64 
[Init]
 64 
[Init]
65 
 
 65 
 
66 
# Option: default-timeout
 66 
# Option: default-ipsettime
67 
# Notes:  specifies default timeout in seconds (handled default ipset timeout only)
 67 
# Notes:  specifies default timeout in seconds (handled default ipset timeout only)
68 
# Values:  [ NUM ]  Default: 600
 68 
# Values:  [ NUM ]  Default: 0 (no timeout, managed by fail2ban by unban)
- 
 
 69 
default-ipsettime = 0
69 
 
 70 
 
- 
 
 71 
# Option: ipsettime
- 
 
 72 
# Notes:  specifies ticket timeout (handled ipset timeout only)
- 
 
 73 
# Values:  [ NUM ]  Default: 0 (managed by fail2ban by unban)
70 
default-timeout = 600
 74 
ipsettime = 0
- 
 
 75 
 
- 
 
 76 
# expresion to caclulate timeout from bantime, example:
- 
 
 77 
# banaction = %(known/banaction)s[ipsettime='<timeout-bantime>']
- 
 
 78 
timeout-bantime = $([ "<bantime>" -le 2147483 ] && echo "<bantime>" || echo 0)
71 
 
 79 
 
72 
ipmset = f2b-<name>
 80 
ipmset = f2b-<name>
73 
familyopt =
 81 
familyopt =
74 
 
 82 
 
75 
 
 83 
 
76 
[Init?family=inet6]
 84 
[Init?family=inet6]
77 
 
 85 
 
78 
ipmset = f2b-<name>6
 86 
ipmset = f2b-<name>6
79 
familyopt = <sp>family inet6
 87 
familyopt = family inet6