github
/
fail2ban
mirror of https://github.com/fail2ban/fail2ban
1
0
Fork 0
Code Issues Releases Wiki Activity

added pf[protocol=all] options as recommended by sebres

pull/3503/head
repcsi 2023-12-10 11:20:39 +01:00
parent 44fa2959e7
commit 199759f0ba
2 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
THANKS
View File

@ -22,6 +22,7 @@ Andrey G. Grozin
Andy Fragen Andy Fragen
Arturo 'Buanzo' Busleiman Arturo 'Buanzo' Busleiman
Axel Thimm Axel Thimm
Balazs Mateffy
Bas van den Dikkenberg Bas van den Dikkenberg
Beau Raines Beau Raines
Bill Heaton Bill Heaton

6
config/action.d/pf.conf
View File

@ -4,6 +4,7 @@
# #
# Author: Nick Hilliard <nick@foobar.org> # Author: Nick Hilliard <nick@foobar.org>
# Modified by: Alexander Koeppe making PF work seamless and with IPv4 and IPv6 # Modified by: Alexander Koeppe making PF work seamless and with IPv4 and IPv6
# Modified by: Balazs Mateffy adding allproto option so all traffic gets blocked from the malicious source
# #
# #
@ -26,9 +27,11 @@
# } # }
# to your main pf ruleset, where "namei" are the names of the jails # to your main pf ruleset, where "namei" are the names of the jails
# which invoke this action # which invoke this action
# to block all protocols use the pf[protocol=all] option
actionstart = echo "table <<tablename>-<name>> persist counters" | <pfctl> -f- actionstart = echo "table <<tablename>-<name>> persist counters" | <pfctl> -f-
port="<port>"; if [ "$port" != "" ] && case "$port" in \{*) false;; esac; then port="{$port}"; fi port="<port>"; if [ "$port" != "" ] && case "$port" in \{*) false;; esac; then port="{$port}"; fi
echo "<block> proto <protocol> from <<tablename>-<name>> to <actiontype>" | <pfctl> -f- protocol="<protocol>"; if [ "$protocol" != "all" ]; then protocol="proto $protocol"; else protocol=all; fi
echo "<block> $protocol from <<tablename>-<name>> to <actiontype>" | <pfctl> -f-
# Option: start_on_demand - to start action on demand # Option: start_on_demand - to start action on demand
# Example: `action=pf[actionstart_on_demand=true]` # Example: `action=pf[actionstart_on_demand=true]`
@ -98,6 +101,7 @@ tablename = f2b
# #
# The action you want pf to take. # The action you want pf to take.
# Probably, you want "block quick", but adjust as needed. # Probably, you want "block quick", but adjust as needed.
# If you want to log all blocked use "blog log quick"
block = block quick block = block quick
# Option: protocol # Option: protocol