github
/
fail2ban
mirror of https://github.com/fail2ban/fail2ban
1
0
Fork 0
Code Issues Releases Wiki Activity

Escape curly braces in nftables actions

pull/1292/head
Alexander Belykh 2016-01-06 17:13:30 +06:00
parent 1983e15580
commit 260c30535d
2 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
config/action.d/nftables-common.conf
View File

@ -22,13 +22,13 @@ after = nftables-common.local
# Notes.: additional expressions for nftables filter rule
# Values: nftables expressions
#
nftables_mode = <protocol> dport { <port> }
nftables_mode = <protocol> dport \{ <port> \}
# Option: actionstart
# Notes.: command executed once at the start of Fail2Ban.
# Values: CMD
#
actionstart = <nftables> add set filter f2b-<name> { type ipv4_addr\; }
actionstart = <nftables> add set filter f2b-<name> \{ type ipv4_addr\; \}
<nftables> insert rule filter <chain> %(nftables_mode)s ip saddr @f2b-<name> <blocktype>
# Option: actionstop
@ -50,7 +50,7 @@ actioncheck = <nftables> list chain filter <chain> | grep -q '@f2b-<name>[ \t]'
# Tags: See jail.conf(5) man page
# Values: CMD
#
actionban = <nftables> add element filter f2b-<name> { <ip> }
actionban = <nftables> add element filter f2b-<name> \{ <ip> \}
# Option: actionunban
# Notes.: command executed when unbanning an IP. Take care that the
@ -58,7 +58,7 @@ actionban = <nftables> add element filter f2b-<name> { <ip> }
# Tags: See jail.conf(5) man page
# Values: CMD
#
actionunban = <nftables> delete element filter f2b-<name> { <ip> }
actionunban = <nftables> delete element filter f2b-<name> \{ <ip> \}
[Init]

2
config/action.d/nftables-multiport.conf
View File

@ -17,6 +17,6 @@ before = nftables-common.conf
# Notes.: additional expressions for nftables filter rule
# Values: nftables expressions
#
nftables_mode = <protocol> dport { <port> }
nftables_mode = <protocol> dport \{ <port> \}
[Init]