|
|
|
@ -106,7 +106,7 @@ actionunban = if [ -f <tmpfile>.first ]; then
|
|
|
|
|
# Option: port
|
|
|
|
|
# Notes.: The target port for the attack (numerical). MUST be provided in the
|
|
|
|
|
# jail config, as it cannot be detected here.
|
|
|
|
|
# Values: [ NUM ] Default: ???
|
|
|
|
|
# Values: [ NUM ]
|
|
|
|
|
#
|
|
|
|
|
port = ???
|
|
|
|
|
|
|
|
|
@ -114,7 +114,7 @@ port = ???
|
|
|
|
|
# Notes.: Your DShield user ID. Should be provided either in the jail config or
|
|
|
|
|
# in a .local file.
|
|
|
|
|
# Register at https://secure.dshield.org/register.html
|
|
|
|
|
# Values: [ NUM ] Default: 0
|
|
|
|
|
# Values: [ NUM ]
|
|
|
|
|
#
|
|
|
|
|
userid = 0
|
|
|
|
|
|
|
|
|
@ -137,7 +137,7 @@ protocol = tcp
|
|
|
|
|
# Notes.: How many lines to buffer before making a report. Regardless of this,
|
|
|
|
|
# reports are sent a minimum of <minreportinterval> apart, or if the
|
|
|
|
|
# buffer contains an event over <maxbufferage> old, or on shutdown
|
|
|
|
|
# Values: [ NUM ] Default: 50
|
|
|
|
|
# Values: [ NUM ]
|
|
|
|
|
#
|
|
|
|
|
lines = 50
|
|
|
|
|
|
|
|
|
@ -145,7 +145,7 @@ lines = 50
|
|
|
|
|
# Notes.: Minimum period (in seconds) that must elapse before we submit another
|
|
|
|
|
# batch of reports. DShield request a minimum of 1 hour (3600 secs)
|
|
|
|
|
# between reports.
|
|
|
|
|
# Values: [ NUM ] Default: 3600
|
|
|
|
|
# Values: [ NUM ]
|
|
|
|
|
#
|
|
|
|
|
minreportinterval = 3600
|
|
|
|
|
|
|
|
|
@ -154,27 +154,27 @@ minreportinterval = 3600
|
|
|
|
|
# submit the batch, even if we haven't reached <lines> yet. Note that
|
|
|
|
|
# this is only checked on each ban/unban, and that we always send
|
|
|
|
|
# anything in the buffer on shutdown. Must be greater than
|
|
|
|
|
# Values: [ NUM ] Default: 21600 (6 hours)
|
|
|
|
|
# Values: [ NUM ]
|
|
|
|
|
#
|
|
|
|
|
maxbufferage = 21600
|
|
|
|
|
|
|
|
|
|
# Option: srcport
|
|
|
|
|
# Notes.: The source port of the attack. You're unlikely to have this info, so
|
|
|
|
|
# you can leave the default
|
|
|
|
|
# Values: [ NUM ] Default: ???
|
|
|
|
|
# Values: [ NUM ]
|
|
|
|
|
#
|
|
|
|
|
srcport = ???
|
|
|
|
|
|
|
|
|
|
# Option: tcpflags
|
|
|
|
|
# Notes.: TCP flags on attack. You're unlikely to have this info, so you can
|
|
|
|
|
# leave empty
|
|
|
|
|
# Values: [ STRING ] Default: (empty)
|
|
|
|
|
# Values: [ STRING ]
|
|
|
|
|
#
|
|
|
|
|
tcpflags =
|
|
|
|
|
|
|
|
|
|
# Option: mailcmd
|
|
|
|
|
# Notes.: Your system mail command. Is passed 2 args: subject and recipient
|
|
|
|
|
# Values: CMD Default: mail -s
|
|
|
|
|
# Values: CMD
|
|
|
|
|
#
|
|
|
|
|
mailcmd = mail -s
|
|
|
|
|
|
|
|
|
@ -186,19 +186,19 @@ mailcmd = mail -s
|
|
|
|
|
# the one configured at DShield - the '--' indicates arguments to be
|
|
|
|
|
# passed to Sendmail):
|
|
|
|
|
# -- -f me@example.com
|
|
|
|
|
# Values: [ STRING ] Default: (empty)
|
|
|
|
|
# Values: [ STRING ]
|
|
|
|
|
#
|
|
|
|
|
mailargs =
|
|
|
|
|
|
|
|
|
|
# Option: dest
|
|
|
|
|
# Notes.: Destination e-mail address for reports
|
|
|
|
|
# Values: [ STRING ] Default: reports@dshield.org
|
|
|
|
|
# Values: [ STRING ]
|
|
|
|
|
#
|
|
|
|
|
dest = reports@dshield.org
|
|
|
|
|
|
|
|
|
|
# Option: tmpfile
|
|
|
|
|
# Notes.: Base name of temporary files used for buffering
|
|
|
|
|
# Values: [ STRING ] Default: /var/run/fail2ban/tmp-dshield
|
|
|
|
|
# Values: [ STRING ]
|
|
|
|
|
#
|
|
|
|
|
tmpfile = /var/run/fail2ban/tmp-dshield
|
|
|
|
|
|
|
|
|
|