From b318eb7e33b5a571e1354f56d0f39185960efeee Mon Sep 17 00:00:00 2001
From: "Sergey G. Brester" <serg.brester@sebres.de>
Date: Mon, 29 Apr 2019 10:45:37 +0200
Subject: [PATCH] closes gh-2408: prevent execution of action `abuseipdb` for
 restored tickets

---
 config/action.d/abuseipdb.conf | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/config/action.d/abuseipdb.conf b/config/action.d/abuseipdb.conf
index c53ed489..dfc81665 100644
--- a/config/action.d/abuseipdb.conf
+++ b/config/action.d/abuseipdb.conf
@@ -47,6 +47,9 @@
 
 [Definition]
 
+# bypass action for restored tickets
+norestored = 1
+
 # Option:  actionstart
 # Notes.:  command executed on demand at the first ban (or at the start of Fail2Ban if actionstart_on_demand is set to false).
 # Values:  CMD