From c38f6654f7451d077606944803c3eb4016becdf9 Mon Sep 17 00:00:00 2001 From: "Avinash H. Duduskar" <2946372+Strykar@users.noreply.github.com> Date: Fri, 14 Jul 2023 00:51:43 +0530 Subject: [PATCH] Make ignorecommand help clearer --- man/jail.conf.5 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/man/jail.conf.5 b/man/jail.conf.5 index 28e41d3f..e58ac292 100644 --- a/man/jail.conf.5 +++ b/man/jail.conf.5 @@ -247,7 +247,7 @@ boolean value (default true) indicates the banning of own IP addresses should be list of IPs not to ban. They can include a DNS resp. CIDR mask too. The option affects additionally to \fBignoreself\fR (if true) and don't need to contain own DNS resp. IPs of the running host. .TP .B ignorecommand -command that is executed to determine if the current candidate IP for banning (or failure-ID for raw IDs) should not be banned. The option affects additionally to \fBignoreself\fR and \fBignoreip\fR and will be first executed if both don't hit. +command that is executed to determine if the current candidate IP for banning (or failure-ID for raw IDs) should not be banned. This option operates alongside the ignoreself and ignoreip options. It is executed first, only if neither ignoreself nor ignoreip match the criteria. .br IP will not be banned if command returns successfully (exit code 0). Like ACTION FILES, tags like are can be included in the ignorecommand value and will be substituted before execution.