diff --git a/CHANGELOG b/CHANGELOG index bd9e6631..ac8ed752 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -13,6 +13,7 @@ ver. 0.7.7 (2007/??/??) - Added a wonderful visual effect when waiting on the server - fail2ban-client returns an error code if configuration is not valid +- Added new filters/actions. Thanks to Yaroslav Halchenko ver. 0.7.6 (2007/01/04) - beta ---------- diff --git a/MANIFEST b/MANIFEST index 57911033..2a71efd5 100644 --- a/MANIFEST +++ b/MANIFEST @@ -70,9 +70,13 @@ config/filter.d/courierlogin.conf config/filter.d/sshd.conf config/filter.d/proftpd.conf config/filter.d/sasl.conf +config/filter.d/wuftpd.conf config/action.d/iptables.conf +config/action.d/iptables-multiport.conf +config/action.d/iptables-new.conf config/action.d/ipfw.conf config/action.d/mail-whois.conf +config/action.d/mail-whois-lines.conf config/action.d/mail.conf config/action.d/hostsdeny.conf config/action.d/shorewall.conf diff --git a/config/action.d/iptables-multiport.conf b/config/action.d/iptables-multiport.conf new file mode 100644 index 00000000..f881a782 --- /dev/null +++ b/config/action.d/iptables-multiport.conf @@ -0,0 +1,69 @@ +# Fail2Ban configuration file +# +# Author: Cyril Jaquier +# Modified by Yaroslav Halchenko for multiport banning +# $Revision$ +# + +[Definition] + +# Option: actionstart +# Notes.: command executed once at the start of Fail2Ban. +# Values: CMD +# +actionstart = iptables -N fail2ban- + iptables -A fail2ban- -j RETURN + iptables -I INPUT -p -m multiport --dports -j fail2ban- + +# Option: actionend +# Notes.: command executed once at the end of Fail2Ban +# Values: CMD +# +actionstop = iptables -D INPUT -p -m multiport --dports -j fail2ban- + iptables -F fail2ban- + iptables -X fail2ban- + +# Option: actioncheck +# Notes.: command executed once before each actionban command +# Values: CMD +# +actioncheck = iptables -n -L INPUT | grep -q fail2ban- + +# Option: actionban +# Notes.: command executed when banning an IP. Take care that the +# command is executed with Fail2Ban user rights. +# Tags: IP address +# number of failures +#