github
/
fail2ban
mirror of https://github.com/fail2ban/fail2ban
1
0
Fork 0
Code Issues Releases Wiki Activity

- Added "ignoreip" and a few other options in [DEFAULT] 

git-svn-id: https://fail2ban.svn.sourceforge.net/svnroot/fail2ban/trunk@365 a942ae1a-1317-0410-a47c-b1dcaea8d605
0.x
Cyril Jaquier 2006-09-17 22:38:44 +00:00
parent c7451fa250
commit 0d68fc9ef1
1 changed files with 13 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
config/jail.conf
View File

@ -5,6 +5,16 @@
# $Revision$ # $Revision$
# #
# The DEFAULT allows a global definition of the options. They can be override
# in each jail afterwards.
[DEFAULT]
ignoreip = 127.0.0.1
bantime = 600
maxretry = 3
# This jail corresponds to the standard configuration in Fail2ban 0.6. # This jail corresponds to the standard configuration in Fail2ban 0.6.
# The mail-whois action send a notification e-mail with a whois request # The mail-whois action send a notification e-mail with a whois request
# in the body. # in the body.
@ -17,7 +27,6 @@ action = iptables[name=SSH, port=ssh, protocol=tcp]
mail-whois[name=SSH, dest=yourmail@mail.com] mail-whois[name=SSH, dest=yourmail@mail.com]
logpath = /var/log/sshd.log logpath = /var/log/sshd.log
maxretry = 5 maxretry = 5
bantime = 600
# This one behaves like the previous and sends a report when the jail # This one behaves like the previous and sends a report when the jail
# is stopped. # is stopped.
@ -31,7 +40,6 @@ action = iptables[name=SSH, port=ssh, protocol=tcp]
mail-report[dest=yourmail@mail.com] mail-report[dest=yourmail@mail.com]
logpath = /var/log/sshd.log logpath = /var/log/sshd.log
maxretry = 5 maxretry = 5
bantime = 600
# Here we use TCP-Wrappers instead of Netfilter/Iptables. # Here we use TCP-Wrappers instead of Netfilter/Iptables.
@ -42,8 +50,7 @@ filter = sshd
action = hostsdeny action = hostsdeny
mail-whois[name=SSH, dest=yourmail@mail.com] mail-whois[name=SSH, dest=yourmail@mail.com]
logpath = /var/log/sshd.log logpath = /var/log/sshd.log
maxretry = 3
bantime = 600
# The hosts.deny path can be defined with the "file" argument if it is # The hosts.deny path can be defined with the "file" argument if it is
# not in /etc. # not in /etc.
@ -55,7 +62,6 @@ filter = postfix
action = hostsdeny[file=/not/a/standard/path/hosts.deny] action = hostsdeny[file=/not/a/standard/path/hosts.deny]
mail[name=Postfix, dest=yourmail@mail.com] mail[name=Postfix, dest=yourmail@mail.com]
logpath = /var/log/postfix.log logpath = /var/log/postfix.log
maxretry = 6
bantime = 300 bantime = 300
# Do not ban anybody. Just report information about the remote host. # Do not ban anybody. Just report information about the remote host.
@ -67,5 +73,5 @@ enabled = false
filter = vsftpd filter = vsftpd
action = mail-whois[name=VSFTPD, dest=yourmail@mail.com] action = mail-whois[name=VSFTPD, dest=yourmail@mail.com]
logpath = /var/log/vsftpd.log logpath = /var/log/vsftpd.log
maxretry = 3 maxretry = 5
bantime = 600 bantime = 1800