github
/
fail2ban
mirror of https://github.com/fail2ban/fail2ban
1
0
Fork 0
Code Issues Releases Wiki Activity
fail2ban/config/action.d
History
usernamepi e4e7a83cff
Update ufw.conf 
Prerequisites:
* The ss command is available, kernel is compiled with option CONFIG_INET_DIAG_DESTROY.
* Ufw version is => 0.36 (released in 2018)

* Now using "prepend" instead of "insert" to be able to handle IPv6 addresses correctly. The current action will fail for IPv6 addresses.
* Now application names containing a space should handled correctly, solves https://github.com/fail2ban/fail2ban/pull/1532
* Now closing IPv4 and IPv6 connections (if any) from the ip that is being banned. The current action will leave them open.
   Using ss to accomplish this. For this to work the kernel needs to be compiled with the CONFIG_INET_DIAG_DESTROY option.
   My system apparently is compiled that way.
 		2021-05-06 13:44:36 +02:00
..
abuseipdb.conf action.d/abuseipdb.conf: removed broken link, simplified usage example, fixed typos 2020-09-17 12:39:08 +02:00
apf.conf DOC: DEV NOTES before author names 2014-01-04 08:53:45 +11:00
apprise.conf involve config parameter (replaces hard-coded path); fixed typo in actionban (looks like copy&paste from trimmed tty) 2020-09-02 20:47:05 +02:00
blocklist_de.conf action.d/*.conf: correct comments for actionstart/actionstop 2018-09-12 16:01:57 +02:00
bsd-ipfw.conf `action.d/bsd-ipfw.conf`: small amend (gh-2836) simplifying awk condition/code (position starts from `<lowest_rule_num>` and increases whilst used) 2020-09-29 13:33:40 +02:00
cloudflare.conf action.d/cloudflare.conf: better IPv6 capability 2021-01-11 15:23:40 +01:00
complain.conf action.d/*.conf: correct comments for actionstart/actionstop 2018-09-12 16:01:57 +02:00
dshield.conf action.d/*.conf: correct comments for actionstart/actionstop 2018-09-12 16:01:57 +02:00
dummy.conf action.d/*.conf: correct comments for actionstart/actionstop 2018-09-12 16:01:57 +02:00
firewallcmd-allports.conf updated firewallcmd actions 2016-05-13 21:36:27 -04:00
firewallcmd-common.conf Update firewallcmd-common.conf 2016-05-13 22:38:10 -04:00
firewallcmd-ipset.conf Merge branch '0.10' into 0.11 2020-09-04 13:09:47 +02:00
firewallcmd-multiport.conf `action.d/firewallcmd-*.conf` (multiport only): fixed port range selector, replacing `:` with `-`; 2020-09-03 16:41:23 +02:00
firewallcmd-new.conf `action.d/firewallcmd-*.conf` (multiport only): fixed port range selector, replacing `:` with `-`; 2020-09-03 16:41:23 +02:00
firewallcmd-rich-logging.conf `action.d/firewallcmd-*.conf` (multiport only): fixed port range selector, replacing `:` with `-`; 2020-09-03 16:41:23 +02:00
firewallcmd-rich-rules.conf `action.d/firewallcmd-*.conf` (multiport only): fixed port range selector, replacing `:` with `-`; 2020-09-03 16:41:23 +02:00
helpers-common.conf action.d/helpers-common.conf: grep arguments are rewritten - using options `-wF` to match only whole words and fixed string (not as pattern) 2019-05-10 16:17:13 +02:00
hostsdeny.conf action.d/*.conf: correct comments for actionstart/actionstop 2018-09-12 16:01:57 +02:00
ipfilter.conf action.d/*.conf: correct comments for actionstart/actionstop 2018-09-12 16:01:57 +02:00
ipfw.conf action.d/*.conf: correct comments for actionstart/actionstop 2018-09-12 16:01:57 +02:00
iptables-allports.conf action.d/*.conf: correct comments for actionstart/actionstop 2018-09-12 16:01:57 +02:00
iptables-common.conf bulk unban: add new command `actionflush` default for several iptables/iptables-ipset actions (and common include): 2017-03-29 23:24:11 +02:00
iptables-ipset-proto4.conf action.d/*.conf: correct comments for actionstart/actionstop 2018-09-12 16:01:57 +02:00
iptables-ipset-proto6-allports.conf Merge branch '0.10' into 0.11 2020-08-04 15:40:59 +02:00
iptables-ipset-proto6.conf Merge branch '0.10' into 0.11 2020-08-04 15:40:59 +02:00
iptables-multiport-log.conf action.d/*.conf: correct comments for actionstart/actionstop 2018-09-12 16:01:57 +02:00
iptables-multiport.conf action.d/*.conf: correct comments for actionstart/actionstop 2018-09-12 16:01:57 +02:00
iptables-new.conf action.d/*.conf: correct comments for actionstart/actionstop 2018-09-12 16:01:57 +02:00
iptables-xt_recent-echo.conf action.d/*.conf: correct comments for actionstart/actionstop 2018-09-12 16:01:57 +02:00
iptables.conf action.d/*.conf: correct comments for actionstart/actionstop 2018-09-12 16:01:57 +02:00
mail-buffered.conf action.d/*.conf: correct comments for actionstart/actionstop 2018-09-12 16:01:57 +02:00
mail-whois-common.conf normalize, simplify and fix several mail actions (mail and sendmail actions are more similar now, sendmail is configurable via parameter `mailcmd`, etc); 2019-06-15 23:14:41 +02:00
mail-whois-lines.conf action.d/*.conf: correct comments for actionstart/actionstop 2018-09-12 16:01:57 +02:00
mail-whois.conf action.d/*.conf: correct comments for actionstart/actionstop 2018-09-12 16:01:57 +02:00
mail.conf action.d/*.conf: correct comments for actionstart/actionstop 2018-09-12 16:01:57 +02:00
mynetwatchman.conf action.d/*.conf: correct comments for actionstart/actionstop 2018-09-12 16:01:57 +02:00
netscaler.conf Introduced Citrix Netscaler action 2017-01-19 14:30:25 +01:00
nftables-allports.conf combine nftables actions to single action: 2019-09-24 18:53:38 +02:00
nftables-multiport.conf combine nftables actions to single action: 2019-09-24 18:53:38 +02:00
nftables.conf action.d/nftables.conf (type=multiport only): fixed port range selector (replacing `:` with `-`) 2020-06-24 19:20:36 +02:00
nginx-block-map.conf `action.d/nginx-block-map.conf`: reload nginx only if it is running (also avoid error in nginx-errorlog, gh-2949) and better test coverage for the action 2021-02-24 18:21:42 +01:00
npf.conf action.d/*.conf: correct comments for actionstart/actionstop 2018-09-12 16:01:57 +02:00
nsupdate.conf action.d/*.conf: correct comments for actionstart/actionstop 2018-09-12 16:01:57 +02:00
osx-afctl.conf [ban-time-incr] prolong ban, dynamic bantime, etc.: 2017-05-17 13:25:06 +02:00
osx-ipfw.conf action.d/*.conf: correct comments for actionstart/actionstop 2018-09-12 16:01:57 +02:00
pf.conf action.d/*.conf: correct comments for actionstart/actionstop 2018-09-12 16:01:57 +02:00
route.conf Updated route.conf to clear warnings 2015-10-09 18:16:36 -07:00
sendmail-buffered.conf normalize, simplify and fix several mail actions (mail and sendmail actions are more similar now, sendmail is configurable via parameter `mailcmd`, etc); 2019-06-15 23:14:41 +02:00
sendmail-common.conf normalize, simplify and fix several mail actions (mail and sendmail actions are more similar now, sendmail is configurable via parameter `mailcmd`, etc); 2019-06-15 23:14:41 +02:00
sendmail-geoip-lines.conf normalize, simplify and fix several mail actions (mail and sendmail actions are more similar now, sendmail is configurable via parameter `mailcmd`, etc); 2019-06-15 23:14:41 +02:00
sendmail-whois-ipjailmatches.conf normalize, simplify and fix several mail actions (mail and sendmail actions are more similar now, sendmail is configurable via parameter `mailcmd`, etc); 2019-06-15 23:14:41 +02:00
sendmail-whois-ipmatches.conf normalize, simplify and fix several mail actions (mail and sendmail actions are more similar now, sendmail is configurable via parameter `mailcmd`, etc); 2019-06-15 23:14:41 +02:00
sendmail-whois-lines.conf normalize, simplify and fix several mail actions (mail and sendmail actions are more similar now, sendmail is configurable via parameter `mailcmd`, etc); 2019-06-15 23:14:41 +02:00
sendmail-whois-matches.conf normalize, simplify and fix several mail actions (mail and sendmail actions are more similar now, sendmail is configurable via parameter `mailcmd`, etc); 2019-06-15 23:14:41 +02:00
sendmail-whois.conf normalize, simplify and fix several mail actions (mail and sendmail actions are more similar now, sendmail is configurable via parameter `mailcmd`, etc); 2019-06-15 23:14:41 +02:00
sendmail.conf normalize, simplify and fix several mail actions (mail and sendmail actions are more similar now, sendmail is configurable via parameter `mailcmd`, etc); 2019-06-15 23:14:41 +02:00
shorewall-ipset-proto6.conf Merge branch '0.10' into 0.11 2020-08-04 15:40:59 +02:00
shorewall.conf Merge remote-tracking branch 'remotes/gh-upstream/master' into 0.10 2018-11-21 13:05:42 +01:00
smtp.py coverage: try to avoid sporadic "coverage decreased" in CI 2019-02-22 13:20:40 +01:00
symbiosis-blacklist-allports.conf action.d/*.conf: correct comments for actionstart/actionstop 2018-09-12 16:01:57 +02:00
ufw.conf Update ufw.conf 2021-05-06 13:44:36 +02:00
xarf-login-attack.conf action.d/xarf-login-attack.conf: fixes gh-2372, correction for split of addresses, interpolation is shell-independent now, etc; 2019-03-16 00:05:06 +01:00