github
/
fail2ban
mirror of https://github.com/fail2ban/fail2ban
1
0
Fork 0
Code Issues Releases Wiki Activity

content of `debian-files/jail.d_defaults-debian.conf` (banactions only and systemd for sshd) moved to `paths-debian.conf`; 

remove default backend (systemd) - too dangerous for all jails, because it's hardly to find an error if some jail mistakenly start to monitor journal instead of logfile (even if it exists), but will silently find nothing;
sshd jail disabled by default - user have to enable jails in jail.local or jail.d
debian
sebres 2024-04-26 00:25:19 +02:00
parent e0e228ae91
commit 85a4881a9a
2 changed files with 5 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
config/paths-debian.conf
View File

@ -9,6 +9,11 @@ after = paths-overrides.local
[DEFAULT] [DEFAULT]
banaction = nftables
banaction_allports = nftables[type=allports]
sshd_backend = systemd
syslog_mail = /var/log/mail.log syslog_mail = /var/log/mail.log
# control the `mail.warn` setting, see `/etc/rsyslog.d/50-default.conf` (if commented `mail.*` wins). # control the `mail.warn` setting, see `/etc/rsyslog.d/50-default.conf` (if commented `mail.*` wins).

7
debian/debian-files/jail.d_defaults-debian.conf vendored
View File

@ -1,7 +0,0 @@
[DEFAULT]
banaction = nftables
banaction_allports = nftables[type=allports]
backend = systemd
[sshd]
enabled = true