mirror of https://github.com/fail2ban/fail2ban
slightly corrected description for interpolations/parameters
parent
c46b9e0dca
commit
6d3c52a965
|
@ -37,18 +37,19 @@ NOTE: -e command line parameter is non existant in 0.7.x
|
||||||
|
|
||||||
|
|
||||||
* Interpolations vs actions/filters parameters:
|
* Interpolations vs actions/filters parameters:
|
||||||
For details see #398739.
|
|
||||||
|
|
||||||
Summary: every pair of .conf and then .local (if exists) files read
|
For details see #398739 or wait for a closure of #400416
|
||||||
separately from the others, so interpolations cannot penetrate from
|
|
||||||
(for instance) jail.* into actions.d/iptables.conf. To overcome this,
|
Every pair of .conf and then .local (if exists) files is read
|
||||||
you are welcome to create/use any parameter which can be substituted
|
separately from any other configuration file, so interpolations cannot
|
||||||
in actions/filters [Definition] section, whenever it is also defined
|
penetrate from jail.* into actions.d/*. To overcome this, it is
|
||||||
in the [Init] section of that file and used in place of necessary
|
necessary to create a PARAMETER which can be substituted in actions
|
||||||
placement as <parameter>. Parameters can be specified in the
|
[Definition] section, if it is also defined in the [Init] section of
|
||||||
definitions within jail.{conf,local}. For instance 1 lengthy example,
|
that file and is used in place of necessary allocation as <PARAMETER>
|
||||||
where fwchain is both used as interpolation (in jail.local) and
|
tag. Parameters can be specified in the definitions within
|
||||||
parameter (in iptables-flex.local).
|
jail.{conf,local}. For instance, 1 lengthy example, where the same
|
||||||
|
name "fwchain" is used both as interpolation (in jail.local) and as a
|
||||||
|
parameter (in iptables-flex.local) (from #398739)
|
||||||
|
|
||||||
==> /etc/fail2ban/jail.local <==
|
==> /etc/fail2ban/jail.local <==
|
||||||
[DEFAULT]
|
[DEFAULT]
|
||||||
|
@ -199,4 +200,4 @@ P.S. Anyone is welcome to recommend proper security solution to this
|
||||||
issue, such as an alternative to sysklogd which allows better control
|
issue, such as an alternative to sysklogd which allows better control
|
||||||
over users logging to specific facilities (such as AUTH)
|
over users logging to specific facilities (such as AUTH)
|
||||||
|
|
||||||
-- Yaroslav O. Halchenko <debian@onerussian.com>, Wed, 6 Dec 2006 22:56:20 -0500
|
-- Yaroslav O. Halchenko <debian@onerussian.com>, Thu, 7 Dec 2006 18:09:36 -0500
|
||||||
|
|
|
@ -3,13 +3,13 @@ fail2ban (0.7.4-5) unstable; urgency=low
|
||||||
* Added Suggests on mailx and relevant comments in README.Debian about
|
* Added Suggests on mailx and relevant comments in README.Debian about
|
||||||
invoking mail actions (closes: #396668)
|
invoking mail actions (closes: #396668)
|
||||||
* Removed obsolete entries in TODO and README
|
* Removed obsolete entries in TODO and README
|
||||||
* README.Debian describes a bit issue of interpolations vs parameters passed
|
* README.Debian describes the use of interpolations vs parameters passed
|
||||||
from jail.{conf,local} into an action or a filter definition (closes:
|
from jail.{conf,local} into an action definitions (closes:
|
||||||
#398739)
|
#398739)
|
||||||
* Initial version of postfix filter (closes: #377711)
|
* Initial version of postfix filter has been present in 0.7 (closes:
|
||||||
|
#377711)
|
||||||
* Removed Uploaded field from control since I am a DD now. Big thanks to
|
* Removed Uploaded field from control since I am a DD now. Big thanks to
|
||||||
Barak Pearlmutter for being the sponsor of my packages for few
|
Barak Pearlmutter for being the sponsor of my packages for few years.
|
||||||
years.
|
|
||||||
|
|
||||||
-- Yaroslav O. Halchenko <debian@onerussian.com> Wed, 6 Dec 2006 22:14:26 -0500
|
-- Yaroslav O. Halchenko <debian@onerussian.com> Wed, 6 Dec 2006 22:14:26 -0500
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue