mirror of https://github.com/fail2ban/fail2ban
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
74 lines
2.2 KiB
74 lines
2.2 KiB
# Fail2Ban configuration file |
|
# |
|
# Author: Daniel Black |
|
# |
|
# This is for ipset protocol 4 (ipset v4.2). If you have a later version |
|
# of ipset try to use the iptables-ipset-proto6.conf as it does some things |
|
# nicer. |
|
# |
|
# This requires the program ipset which is normally in package called ipset. |
|
# |
|
# IPset was a feature introduced in the linux kernel 2.6.39 and 3.0.0 kernels. |
|
# |
|
# If you are running on an older kernel you make need to patch in external |
|
# modules. Debian squeeze can do this with: |
|
# apt-get install xtables-addons-source |
|
# module-assistant auto-install xtables-addons |
|
# |
|
# Debian wheezy and above uses protocol 6 |
|
|
|
[INCLUDES] |
|
|
|
before = iptables.conf |
|
|
|
[Definition] |
|
|
|
# Option: actionstart |
|
# Notes.: command executed on demand at the first ban (or at the start of Fail2Ban if actionstart_on_demand is set to false). |
|
# Values: CMD |
|
# |
|
actionstart = ipset --create f2b-<name> maxelem <maxelem> iphash |
|
<_ipt_add_rules> |
|
|
|
|
|
# Option: actionflush |
|
# Notes.: command executed once to flush IPS, by shutdown (resp. by stop of the jail or this action) |
|
# Values: CMD |
|
# |
|
actionflush = ipset --flush f2b-<name> |
|
|
|
# Option: actionstop |
|
# Notes.: command executed at the stop of jail (or at the end of Fail2Ban) |
|
# Values: CMD |
|
# |
|
actionstop = <_ipt_del_rules> |
|
<actionflush> |
|
ipset --destroy f2b-<name> |
|
|
|
# Option: actionban |
|
# Notes.: command executed when banning an IP. Take care that the |
|
# command is executed with Fail2Ban user rights. |
|
# Tags: See jail.conf(5) man page |
|
# Values: CMD |
|
# |
|
actionban = ipset --test f2b-<name> <ip> || ipset --add f2b-<name> <ip> |
|
|
|
# Option: actionunban |
|
# Notes.: command executed when unbanning an IP. Take care that the |
|
# command is executed with Fail2Ban user rights. |
|
# Tags: See jail.conf(5) man page |
|
# Values: CMD |
|
# |
|
actionunban = ipset --test f2b-<name> <ip> && ipset --del f2b-<name> <ip> |
|
|
|
# Several capabilities used internally: |
|
|
|
rule-jump = -m set --match-set f2b-<name> src -j <blocktype> |
|
|
|
[Init] |
|
|
|
# Option: maxelem |
|
# Notes: maximal number of elements which can be stored in the ipset |
|
# You may want to increase this for long-duration/high-volume jails |
|
# Values: [ NUM ] Default: 65536 |
|
maxelem = 65536
|
|
|