github
/
fail2ban
mirror of https://github.com/fail2ban/fail2ban
1
0
Fork 0
Code Issues Releases Wiki Activity

* down cased the name of the chain so it doesn't appear first in iptables -L

debian-releases/etch
Yaroslav Halchenko 2005-07-23 19:44:01 +00:00
parent ff32f0ec9a
commit 35c7616cc0
1 changed files with 16 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
config/fail2ban.conf.default
View File

@ -147,17 +147,17 @@ logfile = /var/log/apache/access.log
# Notes.: command executed once at the start of Fail2Ban # Notes.: command executed once at the start of Fail2Ban
# Values: CMD Default: # Values: CMD Default:
# #
fwstart = iptables -N FAIL2BAN-HTTP fwstart = iptables -N fail2ban-HTTP
iptables -I INPUT -i eth0 -p tcp --dport http -j FAIL2BAN-HTTP iptables -I INPUT -i eth0 -p tcp --dport http -j fail2ban-HTTP
iptables -A FAIL2BAN-HTTP -j RETURN iptables -A fail2ban-HTTP -j RETURN
# Option: fwend # Option: fwend
# Notes.: command executed once at the end of Fail2Ban # Notes.: command executed once at the end of Fail2Ban
# Values: CMD Default: # Values: CMD Default:
# #
fwend = iptables -D INPUT -i eth0 -p tcp --dport http -j FAIL2BAN-HTTP fwend = iptables -D INPUT -i eth0 -p tcp --dport http -j fail2ban-HTTP
iptables -D FAIL2BAN-HTTP -j RETURN iptables -D fail2ban-HTTP -j RETURN
iptables -X FAIL2BAN-HTTP iptables -X fail2ban-HTTP
# Option: fwban # Option: fwban
# Notes.: command executed when banning an IP. Take care that the # Notes.: command executed when banning an IP. Take care that the
@ -169,7 +169,7 @@ fwend = iptables -D INPUT -i eth0 -p tcp --dport http -j FAIL2BAN-HTTP
# Values: CMD # Values: CMD
# Default: iptables -I INPUT 1 -i eth0 -s <ip> -j DROP # Default: iptables -I INPUT 1 -i eth0 -s <ip> -j DROP
# #
fwban = iptables -I FAIL2BAN-HTTP 1 -i eth0 -s <ip> -j DROP fwban = iptables -I fail2ban-HTTP 1 -i eth0 -s <ip> -j DROP
# Option: fwunban # Option: fwunban
# Notes.: command executed when unbanning an IP. Take care that the # Notes.: command executed when unbanning an IP. Take care that the
@ -180,7 +180,7 @@ fwban = iptables -I FAIL2BAN-HTTP 1 -i eth0 -s <ip> -j DROP
# Values: CMD # Values: CMD
# Default: iptables -D INPUT -i eth0 -s <ip> -j DROP # Default: iptables -D INPUT -i eth0 -s <ip> -j DROP
# #
fwunban = iptables -D FAIL2BAN-HTTP -i eth0 -s <ip> -j DROP fwunban = iptables -D fail2ban-HTTP -i eth0 -s <ip> -j DROP
# Option: timeregex # Option: timeregex
# Notes.: regex to match timestamp in Apache logfile. # Notes.: regex to match timestamp in Apache logfile.
@ -219,17 +219,17 @@ logfile = /var/log/auth.log
# Notes.: command executed once at the start of Fail2Ban # Notes.: command executed once at the start of Fail2Ban
# Values: CMD Default: # Values: CMD Default:
# #
fwstart = iptables -N FAIL2BAN-SSH fwstart = iptables -N fail2ban-SSH
iptables -I INPUT -i eth0 -p tcp --dport ssh -j FAIL2BAN-SSH iptables -I INPUT -i eth0 -p tcp --dport ssh -j fail2ban-SSH
iptables -A FAIL2BAN-SSH -j RETURN iptables -A fail2ban-SSH -j RETURN
# Option: fwend # Option: fwend
# Notes.: command executed once at the end of Fail2Ban # Notes.: command executed once at the end of Fail2Ban
# Values: CMD Default: # Values: CMD Default:
# #
fwend = iptables -D INPUT -i eth0 -p tcp --dport ssh -j FAIL2BAN-SSH fwend = iptables -D INPUT -i eth0 -p tcp --dport ssh -j fail2ban-SSH
iptables -D FAIL2BAN-SSH -j RETURN iptables -D fail2ban-SSH -j RETURN
iptables -X FAIL2BAN-SSH iptables -X fail2ban-SSH
# Option: fwbanrule # Option: fwbanrule
# Notes.: command executed when banning an IP. Take care that the # Notes.: command executed when banning an IP. Take care that the
@ -241,7 +241,7 @@ fwend = iptables -D INPUT -i eth0 -p tcp --dport ssh -j FAIL2BAN-SSH
# Values: CMD # Values: CMD
# Default: iptables -I INPUT 1 -i eth0 -s <ip> -j DROP # Default: iptables -I INPUT 1 -i eth0 -s <ip> -j DROP
# #
fwban = iptables -I FAIL2BAN-SSH 1 -i eth0 -s <ip> -j DROP fwban = iptables -I fail2ban-SSH 1 -i eth0 -s <ip> -j DROP
# Option: fwunbanrule # Option: fwunbanrule
# Notes.: command executed when unbanning an IP. Take care that the # Notes.: command executed when unbanning an IP. Take care that the
@ -252,7 +252,7 @@ fwban = iptables -I FAIL2BAN-SSH 1 -i eth0 -s <ip> -j DROP
# Values: CMD # Values: CMD
# Default: iptables -D INPUT -i eth0 -s <ip> -j DROP # Default: iptables -D INPUT -i eth0 -s <ip> -j DROP
# #
fwunban = iptables -D FAIL2BAN-SSH -i eth0 -s <ip> -j DROP fwunban = iptables -D fail2ban-SSH -i eth0 -s <ip> -j DROP
# Option: timeregex # Option: timeregex
# Notes.: regex to match timestamp in SSH logfile. # Notes.: regex to match timestamp in SSH logfile.