use iptables-allports for recidive

10 years ago · 2a3790f8e8
parent 967485c2d0
commit 2a3790f8e8
2 changed files with 4 additions and 2 deletions
--- a/3
+++ b/3
@ -14,6 +14,9 @@ ver. 0.9.2 (2014/XX/XXX) - wanna-be-released
   * $ typo in jail.conf. Thanks Skibbi. Debian bug #767255
   * grep'ing for IP in *mail-whois-lines.conf should now match also
     at the begginning and EOL.  Thanks Dean Lee
+   * recidive uses iptables-allports banaction by default now.
+     Avoids problems with iptables versions not understanding 'all' for
+     protocols and ports

 - New Features:

--- a/config/jail.conf
+++ b/config/jail.conf
@ -655,8 +655,7 @@ maxretry = 5
 [recidive]

 logpath  = /var/log/fail2ban.log
-port     = all
-protocol = all
+banaction = iptables-allports
 bantime  = 604800  ; 1 week
 findtime = 86400   ; 1 day
 maxretry = 5