From 260c30535d71c5ee1d07f843536bd4e9f6163358 Mon Sep 17 00:00:00 2001
From: Alexander Belykh <albel727@ngs.ru>
Date: Wed, 6 Jan 2016 17:13:30 +0600
Subject: [PATCH] Escape curly braces in nftables actions

---
 config/action.d/nftables-common.conf    | 8 ++++----
 config/action.d/nftables-multiport.conf | 2 +-
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/config/action.d/nftables-common.conf b/config/action.d/nftables-common.conf
index 534eec2f..157f3c77 100644
--- a/config/action.d/nftables-common.conf
+++ b/config/action.d/nftables-common.conf
@@ -22,13 +22,13 @@ after = nftables-common.local
 # Notes.:  additional expressions for nftables filter rule
 # Values:  nftables expressions
 #
-nftables_mode = <protocol> dport { <port> }
+nftables_mode = <protocol> dport \{ <port> \}
 
 # Option:  actionstart
 # Notes.:  command executed once at the start of Fail2Ban.
 # Values:  CMD
 #
-actionstart = <nftables> add set filter f2b-<name> { type ipv4_addr\; }
+actionstart = <nftables> add set filter f2b-<name> \{ type ipv4_addr\; \}
               <nftables> insert rule filter <chain> %(nftables_mode)s ip saddr @f2b-<name> <blocktype>
 
 # Option:  actionstop
@@ -50,7 +50,7 @@ actioncheck = <nftables> list chain filter <chain> | grep -q '@f2b-<name>[ \t]'
 # Tags:    See jail.conf(5) man page
 # Values:  CMD
 #
-actionban = <nftables> add element filter f2b-<name> { <ip> }
+actionban = <nftables> add element filter f2b-<name> \{ <ip> \}
 
 # Option:  actionunban
 # Notes.:  command executed when unbanning an IP. Take care that the
@@ -58,7 +58,7 @@ actionban = <nftables> add element filter f2b-<name> { <ip> }
 # Tags:    See jail.conf(5) man page
 # Values:  CMD
 #
-actionunban = <nftables> delete element filter f2b-<name> { <ip> }
+actionunban = <nftables> delete element filter f2b-<name> \{ <ip> \}
 
 [Init]
 
diff --git a/config/action.d/nftables-multiport.conf b/config/action.d/nftables-multiport.conf
index 3c6455e2..d1afafb3 100644
--- a/config/action.d/nftables-multiport.conf
+++ b/config/action.d/nftables-multiport.conf
@@ -17,6 +17,6 @@ before = nftables-common.conf
 # Notes.:  additional expressions for nftables filter rule
 # Values:  nftables expressions
 #
-nftables_mode = <protocol> dport { <port> }
+nftables_mode = <protocol> dport \{ <port> \}
 
 [Init]