github
/
fail2ban
mirror of https://github.com/fail2ban/fail2ban
1
0
Fork 0
Code Issues Releases Wiki Activity

`man/jail.conf.5` - update docu

pull/4069/head
Sergey G. Brester 2025-09-24 18:18:38 +02:00 committed by GitHub
parent 5beee494a3
commit 070d49e09c
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 16 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
man/jail.conf.5
View File

@ -245,8 +245,23 @@ Arguments can be passed to actions to override the default values from the [Init
[name=value,name2=value,name3="values,values"]
.RE
Values can also be quoted (required when value includes a ","). More that one action can be specified (in separate lines).
Values can also be quoted (required when value includes a "," or space). More that one action can be specified (in separate lines).
.br
The action specific arguments can also affect conditional parameters, so for instance to submit different values to different chains
firstly pass the argument affecting all chains, e.g. \fIblocktype\fR, then for IPv6 chain, e. g. \fIblocktype?family=inet6\fR.
Examples:
.RS
.nf
# pass blocktype to DROP for all chains:
banaction_allports = iptables-ipset[type=allports, blocktype=DROP]
# pass different blocktype for IPv4 and IPv6 chains:
banaction = iptables-ipset[type=multiport, blocktype="REJECT --reject-with icmp-host-unreachable", blocktype?family=inet6="REJECT --reject-with icmp6-host-unreachable"]
.fi
.RE
.RE
.TP
.B ignoreself
boolean value (default true) indicates the banning of own IP addresses should be prevented