Merge branch 'enh/recidive-allports' of https://github.com/yarikoptic/fail2ban

* 'enh/recidive-allports' of https://github.com/yarikoptic/fail2ban: use iptables-allports for recidive Conflicts: ChangeLog
10 years ago · 65980a70fc
parent 4f28bc4fb0 2a3790f8e8
commit 65980a70fc
2 changed files with 4 additions and 2 deletions
--- a/3
+++ b/3
@ -26,6 +26,9 @@ ver. 0.9.2 (2014/XX/XXX) - wanna-be-released
   * filter.d/postfix-sasl.conf - failregex is now case insensitive
   * filters.d/postfix.conf - add 'Client host rejected error message' failregex
   * fail2ban/__init__.py - add strptime thread safety hack-around
+   * recidive uses iptables-allports banaction by default now.
+     Avoids problems with iptables versions not understanding 'all' for
+     protocols and ports

 - New Features:
   - New filter:
--- a/config/jail.conf
+++ b/config/jail.conf
@ -663,8 +663,7 @@ maxretry = 5
 [recidive]

 logpath  = /var/log/fail2ban.log
-port     = all
-protocol = all
+banaction = iptables-allports
 bantime  = 604800  ; 1 week
 findtime = 86400   ; 1 day
 maxretry = 5