mirror of https://github.com/fail2ban/fail2ban
- Added start and end command options
git-svn-id: https://fail2ban.svn.sourceforge.net/svnroot/fail2ban/branches/FAIL2BAN-0_5@116 a942ae1a-1317-0410-a47c-b1dcaea8d6050.5
parent
685f4aad99
commit
992a3f7d31
|
@ -60,11 +60,17 @@ bantime = 600
|
||||||
#
|
#
|
||||||
ignoreip =
|
ignoreip =
|
||||||
|
|
||||||
# Option: interface
|
# Option: cmdstart
|
||||||
# Notes.: interface name on which the IP will be banned.
|
# Notes.: command executed once at the start of Fail2Ban
|
||||||
# Values: INT Default: eth0
|
# Values: CMD
|
||||||
#
|
# Default
|
||||||
interface = eth0
|
cmdstart =
|
||||||
|
|
||||||
|
# Option: cmdend
|
||||||
|
# Notes.: command executed once at the end of Fail2Ban
|
||||||
|
# Values: CMD
|
||||||
|
# Default
|
||||||
|
cmdend =
|
||||||
|
|
||||||
# Option: polltime
|
# Option: polltime
|
||||||
# Notes.: number of seconds fail2ban sleeps between iterations.
|
# Notes.: number of seconds fail2ban sleeps between iterations.
|
||||||
|
@ -87,25 +93,35 @@ enabled = false
|
||||||
# Notes.: logfile to monitor.
|
# Notes.: logfile to monitor.
|
||||||
# Values: FILE Default: /var/log/httpd/access_log
|
# Values: FILE Default: /var/log/httpd/access_log
|
||||||
#
|
#
|
||||||
logfile = /home/cyril/workspace/fail2ban/log-test/apache
|
logfile = /home/cyril/workspace/fail2ban-unstable/log-test/apache
|
||||||
|
|
||||||
# Option: fwbanrule
|
# Option: fwstart
|
||||||
|
# Notes.: command executed once at the start of Fail2Ban
|
||||||
|
# Values: CMD
|
||||||
|
# Default
|
||||||
|
fwstart =
|
||||||
|
|
||||||
|
# Option: fwend
|
||||||
|
# Notes.: command executed once at the end of Fail2Ban
|
||||||
|
# Values: CMD
|
||||||
|
# Default
|
||||||
|
fwend =
|
||||||
|
|
||||||
|
# Option: fwban
|
||||||
# Notes.: command executed when banning an IP. Take care that the
|
# Notes.: command executed when banning an IP. Take care that the
|
||||||
# command is executed with Fail2Ban user rights.
|
# command is executed with Fail2Ban user rights.
|
||||||
# <if> interface name
|
|
||||||
# <ip> IP address
|
# <ip> IP address
|
||||||
# Values: CMD
|
# Values: CMD
|
||||||
# Default iptables -I INPUT 1 -i <if> -s <ip> -j DROP
|
# Default iptables -I INPUT 1 -i eth0 -s <ip> -j DROP
|
||||||
fwbanrule = iptables -I INPUT 1 -i <if> -s <ip> -j DROP
|
fwban = iptables -I INPUT 1 -i eth0 -s <ip> -j DROP
|
||||||
|
|
||||||
# Option: fwunbanrule
|
# Option: fwunban
|
||||||
# Notes.: command executed when unbanning an IP. Take care that the
|
# Notes.: command executed when unbanning an IP. Take care that the
|
||||||
# command is executed with Fail2Ban user rights.
|
# command is executed with Fail2Ban user rights.
|
||||||
# <if> interface name
|
|
||||||
# <ip> IP address
|
# <ip> IP address
|
||||||
# Values: CMD
|
# Values: CMD
|
||||||
# Default iptables -D INPUT -i <if> -s <ip> -j DROP
|
# Default iptables -D INPUT -i eth0 -s <ip> -j DROP
|
||||||
fwunbanrule = iptables -D INPUT -i <if> -s <ip> -j DROP
|
fwunban = iptables -D INPUT -i eth0 -s <ip> -j DROP
|
||||||
|
|
||||||
# Option: timeregex
|
# Option: timeregex
|
||||||
# Notes.: regex to match timestamp in Apache logfile.
|
# Notes.: regex to match timestamp in Apache logfile.
|
||||||
|
@ -138,25 +154,35 @@ enabled = true
|
||||||
# Notes.: logfile to monitor.
|
# Notes.: logfile to monitor.
|
||||||
# Values: FILE Default: /var/log/secure
|
# Values: FILE Default: /var/log/secure
|
||||||
#
|
#
|
||||||
logfile = /home/cyril/workspace/fail2ban/log-test/test
|
logfile = /home/cyril/workspace/fail2ban-unstable/log-test/test
|
||||||
|
|
||||||
|
# Option: fwstart
|
||||||
|
# Notes.: command executed once at the start of Fail2Ban
|
||||||
|
# Values: CMD
|
||||||
|
# Default
|
||||||
|
fwstart =
|
||||||
|
|
||||||
|
# Option: fwend
|
||||||
|
# Notes.: command executed once at the end of Fail2Ban
|
||||||
|
# Values: CMD
|
||||||
|
# Default
|
||||||
|
fwend =
|
||||||
|
|
||||||
# Option: fwbanrule
|
# Option: fwbanrule
|
||||||
# Notes.: command executed when banning an IP. Take care that the
|
# Notes.: command executed when banning an IP. Take care that the
|
||||||
# command is executed with Fail2Ban user rights.
|
# command is executed with Fail2Ban user rights.
|
||||||
# <if> interface name
|
|
||||||
# <ip> IP address
|
# <ip> IP address
|
||||||
# Values: CMD
|
# Values: CMD
|
||||||
# Default iptables -I INPUT 1 -i <if> -s <ip> -j DROP
|
# Default iptables -I INPUT 1 -i eth0 -s <ip> -j DROP
|
||||||
fwbanrule = iptables -I INPUT 1 -i <if> -s <ip> -j DROP
|
fwban = iptables -I INPUT 1 -i eth0 -s <ip> -j DROP
|
||||||
|
|
||||||
# Option: fwunbanrule
|
# Option: fwunbanrule
|
||||||
# Notes.: command executed when unbanning an IP. Take care that the
|
# Notes.: command executed when unbanning an IP. Take care that the
|
||||||
# command is executed with Fail2Ban user rights.
|
# command is executed with Fail2Ban user rights.
|
||||||
# <if> interface name
|
|
||||||
# <ip> IP address
|
# <ip> IP address
|
||||||
# Values: CMD
|
# Values: CMD
|
||||||
# Default iptables -D INPUT -i <if> -s <ip> -j DROP
|
# Default iptables -D INPUT -i eth0 -s <ip> -j DROP
|
||||||
fwunbanrule = iptables -D INPUT -i <if> -s <ip> -j DROP
|
fwunban = iptables -D INPUT -i eth0 -s <ip> -j DROP
|
||||||
|
|
||||||
# Option: timeregex
|
# Option: timeregex
|
||||||
# Notes.: regex to match timestamp in SSH logfile.
|
# Notes.: regex to match timestamp in SSH logfile.
|
||||||
|
|
Loading…
Reference in New Issue