github
/
fail2ban
mirror of https://github.com/fail2ban/fail2ban
1
0
Fork 0
Code Issues Releases Wiki Activity
fail2ban/config/action.d/iptables-ipset-proto6.conf

28 lines
773 B
Plaintext
Raw Normal View History

base ipset support
2012-12-11 11:22:51 +00:00
# Fail2Ban configuration file
#
# Author: Daniel Black
#
more documentation and optimisations/fixes based on testing
2012-12-11 12:58:48 +00:00
# This is for ipset protocol 6 (and hopefully later) (ipset v6.14).
# Use ipset -V to see the protocol and version. Version 4 should use
# iptables-ipset-proto4.conf.
base ipset support
2012-12-11 11:22:51 +00:00
#
more documentation and optimisations/fixes based on testing
2012-12-11 12:58:48 +00:00
# This requires the program ipset which is normally in package called ipset.
#
# IPset was a feature introduced in the linux kernel 2.6.39 and 3.0.0 kernels.
#
# If you are running on an older kernel you make need to patch in external
# modules.
actions support IPv6 now: - introduced "conditional" sections, see for example `[Init?family=inet6]`; - iptables-common and other iptables config(s) made IPv6 capable; - several small code optimizations; * all test cases passed (py3.x compatible);
2016-05-10 16:40:07 +00:00
#
# Modified: Alexander Koeppe <format_c@online.de>, Serg G. Brester <serg.brester@sebres.de>
# made config file IPv6 capable (see new section Init?family=inet6)
replace internals of several iptables-ipset actions using internals of iptables include: - better check mechanism (using `-C`, option `--check` is available long time); - additionally iptables-ipset is a common action for iptables-ipset-proto6-* now (which become obsolete now); - many features of different iptables actions are combinable as single chain/rule (can be supplied to action as parameters); - tests adjusted.
2020-01-17 07:56:15 +00:00
#
# Obsolete: superseded by iptables-ipset[type=multiport]
base ipset support
2012-12-11 11:22:51 +00:00
ENH: consolidate where blocktype is defined for iptables rules
2013-05-07 21:52:08 +00:00
[INCLUDES]
replace internals of several iptables-ipset actions using internals of iptables include: - better check mechanism (using `-C`, option `--check` is available long time); - additionally iptables-ipset is a common action for iptables-ipset-proto6-* now (which become obsolete now); - many features of different iptables actions are combinable as single chain/rule (can be supplied to action as parameters); - tests adjusted.
2020-01-17 07:56:15 +00:00
before = iptables-ipset.conf
ENH: consolidate where blocktype is defined for iptables rules
2013-05-07 21:52:08 +00:00
base ipset support
2012-12-11 11:22:51 +00:00
[Definition]
replace internals of several iptables-ipset actions using internals of iptables include: - better check mechanism (using `-C`, option `--check` is available long time); - additionally iptables-ipset is a common action for iptables-ipset-proto6-* now (which become obsolete now); - many features of different iptables actions are combinable as single chain/rule (can be supplied to action as parameters); - tests adjusted.
2020-01-17 07:56:15 +00:00
type = multiport