add blocking type

pull/104/head^2
Daniel Black 2013-02-17 12:37:34 +11:00
parent 03433f79cd
commit 47b1ee39d8
1 changed files with 8 additions and 2 deletions

View File

@ -15,5 +15,11 @@
# - Blocking is per IP and NOT per service, but ideal as action against ssh password bruteforcing hosts
[Definition]
actionban = ip route add blackhole <ip>
actionunban = ip route del blackhole <ip>
actionban = ip route add <type> <ip>
actionunban = ip route del <type> <ip>
# Type of blocking
#
# Type can be blackhole, unreachable and prohibit. Unreachable and prohibit correspond to the ICMP reject messages.
type = blackhole