From 95de9c1a97c8967b4cbebb7256c45f4f5c8c257c Mon Sep 17 00:00:00 2001
From: Mark McKinstry <mmckinst@nexcess.net>
Date: Thu, 18 Oct 2012 11:17:04 -0400
Subject: [PATCH] add support for the APF firewall

---
 config/action.d/apf.conf | 45 ++++++++++++++++++++++++++++++++++++++++
 1 file changed, 45 insertions(+)
 create mode 100644 config/action.d/apf.conf

diff --git a/config/action.d/apf.conf b/config/action.d/apf.conf
new file mode 100644
index 00000000..4cd7f5a1
--- /dev/null
+++ b/config/action.d/apf.conf
@@ -0,0 +1,45 @@
+# Fail2Ban configuration file
+#
+# Author: Mark McKinstry
+#
+# $Revision$
+#
+[Definition]
+
+# Option:  actionstart
+# Notes.:  command executed once at the start of Fail2Ban.
+# Values:  CMD
+#
+actionstart = 
+
+# Option:  actionstop
+# Notes.:  command executed once at the end of Fail2Ban
+# Values:  CMD
+#
+actionstop = 
+
+# Option:  actioncheck
+# Notes.:  command executed once before each actionban command
+# Values:  CMD
+#
+actioncheck = 
+
+# Option:  actionban
+# Notes.:  command executed when banning an IP. Take care that the
+#          command is executed with Fail2Ban user rights.
+# Tags:    <ip>  IP address
+#          <failures>  number of failures
+#          <time>  unix timestamp of the ban time
+# Values:  CMD
+#
+actionban = /usr/local/sbin/apf -d <ip> banned by Fail2Ban
+
+# Option:  actionunban
+# Notes.:  command executed when unbanning an IP. Take care that the
+#          command is executed with Fail2Ban user rights.
+# Tags:    <ip>  IP address
+#          <failures>  number of failures
+#          <time>  unix timestamp of the ban time
+# Values:  CMD
+#
+actionunban = /usr/local/sbin/apf -u <ip>