From d7682360bc262bcf7f1684f88c518ce72a59ec57 Mon Sep 17 00:00:00 2001 From: Cyril Jaquier Date: Sun, 20 Aug 2006 21:34:55 +0000 Subject: [PATCH] - Clean up configuration files git-svn-id: https://fail2ban.svn.sourceforge.net/svnroot/fail2ban/trunk@281 a942ae1a-1317-0410-a47c-b1dcaea8d605 --- config/action.d/foo.conf | 55 ---------------------------------------- config/fail2ban.conf | 12 +++++++++ config/jail.conf | 16 +----------- 3 files changed, 13 insertions(+), 70 deletions(-) delete mode 100644 config/action.d/foo.conf diff --git a/config/action.d/foo.conf b/config/action.d/foo.conf deleted file mode 100644 index 796d736a..00000000 --- a/config/action.d/foo.conf +++ /dev/null @@ -1,55 +0,0 @@ -# Fail2Ban configuration file -# -# Author: Cyril Jaquier -# -# $Revision$ -# - -[Definition] - -# Option: protocol -# Notes.: internally used by config reader for interpolations. -# Values: [ tcp | udp | icmp | all ] Default: tcp -# -protocol = tcp - -# Option: fwstart -# Notes.: command executed once at the start of Fail2Ban. -# Values: CMD Default: -# -actionstart = touch /tmp/fail2ban.foo - -# Option: fwend -# Notes.: command executed once at the end of Fail2Ban -# Values: CMD Default: -# -actionstop = rm -f /tmp/fail2ban.foo - -# Option: fwcheck -# Notes.: command executed once before each fwban command -# Values: CMD Default: -# -actioncheck = [ -e "/tmp/fail2ban.foo" ] - -# Option: fwban -# Notes.: command executed when banning an IP. Take care that the -# command is executed with Fail2Ban user rights. -# Tags: IP address -# number of failures -# unix timestamp of the last failure -# unix timestamp of the ban time -# Values: CMD -# Default: iptables -I INPUT 1 -s -j DROP -# -actionban = echo "+" >> /tmp/fail2ban.foo - -# Option: fwunban -# Notes.: command executed when unbanning an IP. Take care that the -# command is executed with Fail2Ban user rights. -# Tags: IP address -# unix timestamp of the ban time -# unix timestamp of the unban time -# Values: CMD -# Default: iptables -D INPUT -s -j DROP -# -actionunban = echo "-" >> /tmp/fail2ban.foo diff --git a/config/fail2ban.conf b/config/fail2ban.conf index 0e34c456..d3b91464 100644 --- a/config/fail2ban.conf +++ b/config/fail2ban.conf @@ -7,6 +7,18 @@ [Definition] +# Option: loglevel +# Notes.: Set the log level output. +# 1 = ERROR +# 2 = WARN +# 3 = INFO +# 4 = DEBUG +# Values: NUM Default: 3 +# loglevel = 3 +# Option: logtarget +# Notes.: Set the log target. This could be a file, SYSLOG, STDERR. +# Values: STDERR SYSLOG file Default: /var/log/fail2ban.log +# logtarget = /var/log/fail2ban.log diff --git a/config/jail.conf b/config/jail.conf index 0c6ab0c4..c8b94c0b 100644 --- a/config/jail.conf +++ b/config/jail.conf @@ -7,23 +7,9 @@ [dummy] -enabled = true +enabled = false filter = sshd action = hostsdeny[file=/tmp/hosts.deny] mail[name=SSH, dest=cyril.jaquier@bluewin.ch] maxretry = 2 bantime = 10 - -[ssh] - -enabled = false -filter = sshd -action = iptables -bantime = 10 - -[apache-error] - -enabled = false -filter = apache-error -action = hostdeny -