MRG: recidive-protocol-all

2013-11-25 08:22:09 +11:00 · 2013-11-25 08:22:09 +11:00 · 13223c33f5
parent 093aee9676 8aa20a7b0e
commit 13223c33f5
3 changed files with 3 additions and 1 deletions
--- a/1
+++ b/1
@ -16,6 +16,7 @@ ver. 0.8.12 (2013/12/XX) - things-can-only-get-better
  - allow for ",milliseconds" in the custom date format of proftpd.log
  - allow for ", referer ..." in apache-* filter for apache error logs.
  - allow for spaces at the beginning of kernel messages. Closes gh-448
+  - recidive jail to block all protocols. Closes gh-440. Thanks Ioan Indreias

 - New Features:

--- a/1
+++ b/1
@ -35,6 +35,7 @@ Guillaume Delvit
 Hanno 'Rince' Wagner
 Iain Lea
 Jacques Lav!gnotte
+Ioan Indreias
 Jonathan Kamens
 Jonathan Lanning
 Jonathan Underwood
--- a/config/jail.conf
+++ b/config/jail.conf
@ -408,7 +408,7 @@ maxretry = 5
 enabled  = false
 filter   = recidive
 logpath  = /var/log/fail2ban.log
-action   = iptables-allports[name=recidive]
+action   = iptables-allports[name=recidive,protocol=all]
           sendmail-whois-lines[name=recidive, logpath=/var/log/fail2ban.log]
 bantime  = 604800  ; 1 week
 findtime = 86400   ; 1 day