mirror of https://github.com/fail2ban/fail2ban
specified default protocol (tcp) and specified udp for jail for named
parent
ac7e1696d4
commit
990bd15dd5
|
@ -44,19 +44,22 @@ destemail = root@localhost
|
||||||
banaction = iptables-multiport
|
banaction = iptables-multiport
|
||||||
|
|
||||||
|
|
||||||
|
# Default protocol
|
||||||
|
protocol = tcp
|
||||||
|
|
||||||
#
|
#
|
||||||
# Action shortcuts. To be used to define action parameter
|
# Action shortcuts. To be used to define action parameter
|
||||||
|
|
||||||
# The simplest action to take: ban only
|
# The simplest action to take: ban only
|
||||||
action_ = %(banaction)s[name=%(__name__)s, port="%(port)s"]
|
action_ = %(banaction)s[name=%(__name__)s, port="%(port)s", protocol="%(protocol)s]
|
||||||
|
|
||||||
# ban & send an e-mail with whois report to the destemail.
|
# ban & send an e-mail with whois report to the destemail.
|
||||||
action_mw = %(banaction)s[name=%(__name__)s, port="%(port)s"]
|
action_mw = %(banaction)s[name=%(__name__)s, port="%(port)s", protocol="%(protocol)s]
|
||||||
mail-whois[name=%(__name__)s, dest="%(destemail)s"]
|
mail-whois[name=%(__name__)s, dest="%(destemail)s", protocol="%(protocol)s]
|
||||||
|
|
||||||
# ban & send an e-mail with whois report and relevant log lines
|
# ban & send an e-mail with whois report and relevant log lines
|
||||||
# to the destemail.
|
# to the destemail.
|
||||||
action_mwl = %(banaction)s[name=%(__name__)s, port="%(port)s"]
|
action_mwl = %(banaction)s[name=%(__name__)s, port="%(port)s", protocol="%(protocol)s]
|
||||||
mail-whois-lines[name=%(__name__)s, dest="%(destemail)s", logpath=%(logpath)s]
|
mail-whois-lines[name=%(__name__)s, dest="%(destemail)s", logpath=%(logpath)s]
|
||||||
|
|
||||||
# Choose default action. To change, just override value of 'action' with the
|
# Choose default action. To change, just override value of 'action' with the
|
||||||
|
@ -73,6 +76,7 @@ action = %(action_)s
|
||||||
#
|
#
|
||||||
# [SECTION_NAME]
|
# [SECTION_NAME]
|
||||||
# enabled = true
|
# enabled = true
|
||||||
|
|
||||||
#
|
#
|
||||||
# in /etc/fail2ban/jail.local.
|
# in /etc/fail2ban/jail.local.
|
||||||
#
|
#
|
||||||
|
@ -230,5 +234,6 @@ logpath = /var/log/mail.log
|
||||||
|
|
||||||
enabled = false
|
enabled = false
|
||||||
port = domain,953
|
port = domain,953
|
||||||
|
protocol = udp
|
||||||
filter = named-refused
|
filter = named-refused
|
||||||
logpath = /var/log/named/lame-servers.log
|
logpath = /var/log/named/lame-servers.log
|
||||||
|
|
Loading…
Reference in New Issue