mirror of https://github.com/fail2ban/fail2ban
Escape curly braces in nftables actions
parent
1983e15580
commit
260c30535d
|
@ -22,13 +22,13 @@ after = nftables-common.local
|
||||||
# Notes.: additional expressions for nftables filter rule
|
# Notes.: additional expressions for nftables filter rule
|
||||||
# Values: nftables expressions
|
# Values: nftables expressions
|
||||||
#
|
#
|
||||||
nftables_mode = <protocol> dport { <port> }
|
nftables_mode = <protocol> dport \{ <port> \}
|
||||||
|
|
||||||
# Option: actionstart
|
# Option: actionstart
|
||||||
# Notes.: command executed once at the start of Fail2Ban.
|
# Notes.: command executed once at the start of Fail2Ban.
|
||||||
# Values: CMD
|
# Values: CMD
|
||||||
#
|
#
|
||||||
actionstart = <nftables> add set filter f2b-<name> { type ipv4_addr\; }
|
actionstart = <nftables> add set filter f2b-<name> \{ type ipv4_addr\; \}
|
||||||
<nftables> insert rule filter <chain> %(nftables_mode)s ip saddr @f2b-<name> <blocktype>
|
<nftables> insert rule filter <chain> %(nftables_mode)s ip saddr @f2b-<name> <blocktype>
|
||||||
|
|
||||||
# Option: actionstop
|
# Option: actionstop
|
||||||
|
@ -50,7 +50,7 @@ actioncheck = <nftables> list chain filter <chain> | grep -q '@f2b-<name>[ \t]'
|
||||||
# Tags: See jail.conf(5) man page
|
# Tags: See jail.conf(5) man page
|
||||||
# Values: CMD
|
# Values: CMD
|
||||||
#
|
#
|
||||||
actionban = <nftables> add element filter f2b-<name> { <ip> }
|
actionban = <nftables> add element filter f2b-<name> \{ <ip> \}
|
||||||
|
|
||||||
# Option: actionunban
|
# Option: actionunban
|
||||||
# Notes.: command executed when unbanning an IP. Take care that the
|
# Notes.: command executed when unbanning an IP. Take care that the
|
||||||
|
@ -58,7 +58,7 @@ actionban = <nftables> add element filter f2b-<name> { <ip> }
|
||||||
# Tags: See jail.conf(5) man page
|
# Tags: See jail.conf(5) man page
|
||||||
# Values: CMD
|
# Values: CMD
|
||||||
#
|
#
|
||||||
actionunban = <nftables> delete element filter f2b-<name> { <ip> }
|
actionunban = <nftables> delete element filter f2b-<name> \{ <ip> \}
|
||||||
|
|
||||||
[Init]
|
[Init]
|
||||||
|
|
||||||
|
|
|
@ -17,6 +17,6 @@ before = nftables-common.conf
|
||||||
# Notes.: additional expressions for nftables filter rule
|
# Notes.: additional expressions for nftables filter rule
|
||||||
# Values: nftables expressions
|
# Values: nftables expressions
|
||||||
#
|
#
|
||||||
nftables_mode = <protocol> dport { <port> }
|
nftables_mode = <protocol> dport \{ <port> \}
|
||||||
|
|
||||||
[Init]
|
[Init]
|
||||||
|
|
Loading…
Reference in New Issue