diff --git a/config/action.d/apf.conf b/config/action.d/apf.conf index f1d54dd2..f0dde977 100644 --- a/config/action.d/apf.conf +++ b/config/action.d/apf.conf @@ -1,45 +1,17 @@ # Fail2Ban configuration file +# https://www.rfxn.com/projects/advanced-policy-firewall/ # -# Author: Mark McKinstry +# Note: APF doesn't play nicely with other actions. It has been observed to +# remove bans created by other iptables based actions. If you are going to use +# this action, use it for all of your jails. # +# DON'T MIX APF and other IPTABLES based actions [Definition] -# Option: actionstart -# Notes.: command executed once at the start of Fail2Ban. -# Values: CMD -# actionstart = - -# Option: actionstop -# Notes.: command executed once at the end of Fail2Ban -# Values: CMD -# actionstop = - -# Option: actioncheck -# Notes.: command executed once before each actionban command -# Values: CMD -# actioncheck = - -# Option: actionban -# Notes.: command executed when banning an IP. Take care that the -# command is executed with Fail2Ban user rights. -# Tags: IP address -# number of failures -#