From 1ff52dfe4d9c93ddce1cc60878a443a696a496de Mon Sep 17 00:00:00 2001
From: Daniel Black <grooverdan@users.sourceforge.net>
Date: Sat, 14 Dec 2013 00:40:47 +0000
Subject: [PATCH] DOC: document ufw a bit more. Change insertpos default to 1
 to allow it to work if the user run ufw enable

---
 config/action.d/ufw.conf | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git a/config/action.d/ufw.conf b/config/action.d/ufw.conf
index 21b1fe39..c826729d 100644
--- a/config/action.d/ufw.conf
+++ b/config/action.d/ufw.conf
@@ -1,7 +1,9 @@
 # Fail2Ban action configuration file for ufw
 #
-# Author: Guilhem Lettron
-# Enhancements: Daniel Black
+# You are required to run "ufw enable" before this will have an effect.
+#
+# The insert position should be approprate to block the required traffic.
+# A number after an allow rule to the application won't be much use.
 
 [Definition]
 
@@ -18,7 +20,7 @@ actionunban = [ -n "<application>" ] && app="app <application>" ; ufw delete <bl
 [Init]
 # Option: insertpos
 # Notes.:  The postition number in the firewall list to insert the block rule
-insertpos = 2
+insertpos = 1
 
 # Option: blocktype
 # Notes.: reject or deny
@@ -31,3 +33,8 @@ destination = any
 # Option: application
 # Notes.: application from sudo ufw app list
 application = 
+
+# DEV NOTES:
+# 
+# Author: Guilhem Lettron
+# Enhancements: Daniel Black