From 38d3f01a511d168328e310f8c441698969ec1d5f Mon Sep 17 00:00:00 2001
From: Sander Hoentjen <shoentjen@antagonist.nl>
Date: Tue, 8 Mar 2016 13:58:03 +0100
Subject: [PATCH] add support for the CSF firewall

---
 config/action.d/csf.conf | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)
 create mode 100644 config/action.d/csf.conf

diff --git a/config/action.d/csf.conf b/config/action.d/csf.conf
new file mode 100644
index 00000000..c2dc51b6
--- /dev/null
+++ b/config/action.d/csf.conf
@@ -0,0 +1,26 @@
+# Fail2Ban configuration file
+# http://configserver.com/cp/csf.html
+#
+# Note: CSF doesn't play nicely with other actions. It has been observed to
+# remove bans created by other iptables based actions. If you are going to use
+# this action, use it for all of your jails.
+#
+# DON'T MIX CSF and other IPTABLES based actions
+
+[Definition]
+
+actionstart = 
+actionstop = 
+actioncheck = 
+actionban = csf --deny <ip> "banned by Fail2Ban <name>"
+actionunban = csf --denyrm <ip>
+
+[Init]
+
+# Name used in CSF configuration
+#
+name = default
+
+# DEV NOTES:
+#
+# based on apf.conf by Mark McKinstry