Rev 33 | Blame | Compare with Previous | Last modification | View Log | RSS feed
# Fail2Ban configuration file## Author: Cyril Jaquier# Modified: Yaroslav O. Halchenko <debian@onerussian.com># made active on all ports from original iptables.conf##[INCLUDES]before = iptables-common.conf[Definition]# Option: actionstart# Notes.: command executed once at the start of Fail2Ban.# Values: CMD#actionstart = <iptables> -N f2b-<name><iptables> -A f2b-<name> -j <returntype><iptables> -I <chain> -p <protocol> -j f2b-<name># Option: actionstop# Notes.: command executed once at the end of Fail2Ban# Values: CMD#actionstop = <iptables> -D <chain> -p <protocol> -j f2b-<name><iptables> -F f2b-<name><iptables> -X f2b-<name># Option: actioncheck# Notes.: command executed once before each actionban command# Values: CMD#actioncheck = <iptables> -n -L <chain> | grep -q 'f2b-<name>[ \t]'# Option: actionban# Notes.: command executed when banning an IP. Take care that the# command is executed with Fail2Ban user rights.# Tags: See jail.conf(5) man page# Values: CMD#actionban = <iptables> -I f2b-<name> 1 -s <ip> -j <blocktype># Option: actionunban# Notes.: command executed when unbanning an IP. Take care that the# command is executed with Fail2Ban user rights.# Tags: See jail.conf(5) man page# Values: CMD#actionunban = <iptables> -D f2b-<name> -s <ip> -j <blocktype>[Init]