diff --git a/config/jail.conf b/config/jail.conf index 84351360..8e76856f 100644 --- a/config/jail.conf +++ b/config/jail.conf @@ -109,9 +109,12 @@ filter = %(__name__)s # Some options used for actions # Destination email address used solely for the interpolations in -# jail.{conf,local} configuration files. +# jail.{conf,local,d/*} configuration files. destemail = root@localhost +# Sender email address used solely for some actions +sender = root@localhost + # E-mail action. Since 0.8.1 Fail2Ban uses sendmail MTA for the # mailing. Change mta configuration parameter to mail if you want to # revert to conventional 'mail'. @@ -148,6 +151,11 @@ action_mw = %(banaction)s[name=%(__name__)s, port="%(port)s", protocol="%(protoc action_mwl = %(banaction)s[name=%(__name__)s, port="%(port)s", protocol="%(protocol)s", chain="%(chain)s"] %(mta)s-whois-lines[name=%(__name__)s, dest="%(destemail)s", logpath=%(logpath)s, chain="%(chain)s"] +# ban & send a xarf e-mail to abuse contact of IP address and include relevant log lines +# to the destemail. +action_xarf = %(banaction)s[name=%(__name__)s, port="%(port)s", protocol="%(protocol)s", chain="%(chain)s"] + xarf-login-attack[service=%(__name__)s, sender="%(sender)s", logpath=%(logpath)s, port="%(port)s"] + # Choose default action. To change, just override value of 'action' with the # interpolation to the chosen action shortcut (e.g. action_mw, action_mwl, etc) in jail.local # globally (section [DEFAULT]) or per specific section