github
/
fail2ban
mirror of https://github.com/fail2ban/fail2ban
1
0
Fork 0
Code Issues Releases Wiki Activity

Add shorewall IPv6 support 

Small patch which allow fail2ban to use shorewall for IPv6 bans.
pull/1638/head
roedie 2016-12-11 20:44:54 +01:00
parent feae7370ce
commit 6e18508a07
1 changed files with 27 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
config/action.d/shorewall.conf
View File

@ -34,6 +34,8 @@ actionstop =
#
actioncheck =
[Init]
# Option: actionban
# Notes.: command executed when banning an IP. Take care that the
# command is executed with Fail2Ban user rights.
@ -50,10 +52,33 @@ actionban = shorewall <blocktype> <ip>
#
actionunban = shorewall allow <ip>
[Init]
# Option: blocktype
# Note: This is what the action does with rules.
# See man page of shorewall for options that include drop, logdrop, reject, or logreject
# Values: STRING
blocktype = reject
[Init?family=inet6]
# Option: actionban
# Notes.: command executed when banning an IP. Take care that the
# command is executed with Fail2Ban user rights.
# Tags: See jail.conf(5) man page
# Values: CMD
#
actionban = shorewall6 <blocktype> <ip>
# Option: actionunban
# Notes.: command executed when unbanning an IP. Take care that the
# command is executed with Fail2Ban user rights.
# Tags: See jail.conf(5) man page
# Values: CMD
#
actionunban = shorewall6 allow <ip>
# Option: blocktype
# Note: This is what the action does with rules.
# See man page of shorewall6 for options that include drop, logdrop, reject, or logreject
# Values: STRING
blocktype = reject