Rev 39 | Blame | Compare with Previous | Last modification | View Log | RSS feed
## Author: Mike Rushton## IMPORTANT## Please set jail.local's permission to 640 because it contains your CF API key.## This action depends on curl.# Referenced from http://www.normyee.net/blog/2012/02/02/adding-cloudflare-support-to-fail2ban by NORM YEE## To get your CloudFlare API Key: https://www.cloudflare.com/a/account/my-account## CloudFlare API error codes: https://www.cloudflare.com/docs/host-api.html#s4.2[Definition]# Option: actionstart# Notes.: command executed once at the start of Fail2Ban.# Values: CMD#actionstart =# Option: actionstop# Notes.: command executed once at the end of Fail2Ban# Values: CMD#actionstop =# Option: actioncheck# Notes.: command executed once before each actionban command# Values: CMD#actioncheck =# Option: actionban# Notes.: command executed when banning an IP. Take care that the# command is executed with Fail2Ban user rights.# Tags: <ip> IP address# <failures> number of failures# <time> unix timestamp of the ban time# Values: CMD#actionban = curl -s -o /dev/null https://www.cloudflare.com/api_json.html -d 'a=ban' -d 'tkn=<cftoken>' -d 'email=<cfuser>' -d 'key=<ip>'# Option: actionunban# Notes.: command executed when unbanning an IP. Take care that the# command is executed with Fail2Ban user rights.# Tags: <ip> IP address# <failures> number of failures# <time> unix timestamp of the ban time# Values: CMD#actionunban = curl -s -o /dev/null https://www.cloudflare.com/api_json.html -d 'a=nul' -d 'tkn=<cftoken>' -d 'email=<cfuser>' -d 'key=<ip>'[Init]# If you like to use this action with mailing whois lines, you could use the composite action# action_cf_mwl predefined in jail.conf, just define in your jail:## action = %(action_cf_mwl)s# # Your CF account e-mail# cfemail =# # Your CF API Key# cfapikey =cftoken =cfuser =