fail2ban/config/action.d/osx-afctl.conf

# Fail2Ban configuration file for using afctl on Mac OS X Server 10.5
#
# Anonymous author
# http://www.fail2ban.org/wiki/index.php?title=HOWTO_Mac_OS_X_Server_(10.5)&diff=prev&oldid=4081
#
# Ref: https://developer.apple.com/library/mac/documentation/Darwin/Reference/ManPages/man8/afctl.8.html

[Definition]
actionstart = 
actionstop = 
actioncheck = 
actionban = /usr/libexec/afctl -a <ip> -t <bantime>
actionunban = /usr/libexec/afctl -r <ip>

actionprolong = %(actionunban)s && %(actionban)s
ENH: add action.d/osx-afctl anonymously contributed on f2b wiki 2013-08-31 00:51:04 +00:00			`# Fail2Ban configuration file for using afctl on Mac OS X Server 10.5`
			`#`
			`# Anonymous author`
			`# http://www.fail2ban.org/wiki/index.php?title=HOWTO_Mac_OS_X_Server_(10.5)&diff=prev&oldid=4081`
			`#`
			`# Ref: https://developer.apple.com/library/mac/documentation/Darwin/Reference/ManPages/man8/afctl.8.html`

			`[Definition]`
			`actionstart =`
			`actionstop =`
			`actioncheck =`
			`actionban = /usr/libexec/afctl -a <ip> -t <bantime>`
			`actionunban = /usr/libexec/afctl -r <ip>`

[ban-time-incr] prolong ban, dynamic bantime, etc.: - dynamic bantime: introduces new action-tag `<bantime>` corresponds to the current ban-time of the ticket; Note: because it is dynamic, it should be normally removed from `jail.conf` (resp. `jail.local`). - introduced new action command `actionprolong`, used for prolongation of the timeout (ban-time of the ticket); - removed default `timeout` from `actionstart` of several actions; - faster and safer function escapeTag (replacement at once in one run, '\n' and '\r' escaped also); 2017-03-15 09:15:48 +00:00			`actionprolong = %(actionunban)s && %(actionban)s`