diff --git a/config/action.d/iptables-multiport-46.conf b/config/action.d/iptables-multiport-46.conf new file mode 100644 index 00000000..7bb944e4 --- /dev/null +++ b/config/action.d/iptables-multiport-46.conf @@ -0,0 +1,69 @@ +# Fail2Ban configuration file +# +# Author: Cyril Jaquier +# Modified by Yaroslav Halchenko for multiport banning +# Modified by Paul Jung for calling wrapper in dual stack ipv6 and v4 banning +# + +[Definition] + +# Option: actionstart +# Notes.: command executed once at the start of Fail2Ban. +# Values: CMD +# +actionstart = fail2ban-iptwrp -N fail2ban- + fail2ban-iptwrp -A fail2ban- -j RETURN + fail2ban-iptwrp -I INPUT -p -m multiport --dports -j fail2ban- + +# Option: actionstop +# Notes.: command executed once at the end of Fail2Ban +# Values: CMD +# +actionstop = fail2ban-iptwrp -D INPUT -p -m multiport --dports -j fail2ban- + fail2ban-iptwrp -F fail2ban- + fail2ban-iptwrp -X fail2ban- + +# Option: actioncheck +# Notes.: command executed once before each actionban command +# Values: CMD +# +actioncheck = fail2ban-iptwrp -n -L INPUT | grep -q fail2ban- + +# Option: actionban +# Notes.: command executed when banning an IP. Take care that the +# command is executed with Fail2Ban user rights. +# Tags: IP address +# number of failures +#