Rev 3 | Go to most recent revision | Blame | Compare with Previous | Last modification | View Log | RSS feed
# Fail2Ban configuration file## Author: Cyril Jaquier# Modified: Yaroslav O. Halchenko <debian@onerussian.com># made active on all ports from original iptables.conf##[INCLUDES]before = iptables-common.conf[Definition]# Option: actionstart# Notes.: command executed once at the start of Fail2Ban.# Values: CMD#actionstart = iptables -N f2b-<name>iptables -A f2b-<name> -j RETURNiptables -I <chain> -p <protocol> -j f2b-<name># Option: actionstop# Notes.: command executed once at the end of Fail2Ban# Values: CMD#actionstop = iptables -D <chain> -p <protocol> -j f2b-<name>iptables -F f2b-<name>iptables -X f2b-<name># Option: actioncheck# Notes.: command executed once before each actionban command# Values: CMD#actioncheck = iptables -n -L <chain> | grep -q 'f2b-<name>[ \t]'# Option: actionban# Notes.: command executed when banning an IP. Take care that the# command is executed with Fail2Ban user rights.# Tags: See jail.conf(5) man page# Values: CMD#actionban = iptables -I f2b-<name> 1 -s <ip> -j <blocktype># Option: actionunban# Notes.: command executed when unbanning an IP. Take care that the# command is executed with Fail2Ban user rights.# Tags: See jail.conf(5) man page# Values: CMD#actionunban = iptables -D f2b-<name> -s <ip> -j <blocktype>[Init]