mirror of
https://github.com/fail2ban/fail2ban.git
synced 2026-03-11 08:55:31 +00:00
ae1451b29f
Deleting not existent is not error. Adding already present is not error. Otherwise all those entries becomes stale forever, not removed and its number increases over time.
83 lines
2.7 KiB
Text
83 lines
2.7 KiB
Text
# Fail2Ban configuration file
|
|
#
|
|
# Author: Nick Munger
|
|
# Modified by: Ken Menzel
|
|
# Daniel Black (start/stop)
|
|
# Fabian Wenk (many ideas as per fail2ban users list)
|
|
#
|
|
# Ensure firewall_enable="YES" in the top of /etc/rc.conf
|
|
#
|
|
|
|
[Definition]
|
|
|
|
# Option: actionstart
|
|
# Notes.: command executed once at the start of Fail2Ban.
|
|
# Values: CMD
|
|
#
|
|
actionstart = ipfw show | fgrep -q 'table(<table>)' || ( ipfw show | awk 'BEGIN { b = 1 } { if ($1 <= b) { b = $1 + 1 } else { e = b } } END { if (e) exit e <br> else exit b }'; num=$?; ipfw -q add $num <blocktype> <block> from table\(<table>\) to me <port>; echo $num > "<startstatefile>" )
|
|
|
|
|
|
# Option: actionstop
|
|
# Notes.: command executed once at the end of Fail2Ban
|
|
# Values: CMD
|
|
#
|
|
actionstop = [ ! -f <startstatefile> ] || ( read num < "<startstatefile>" <br> ipfw -q delete $num <br> rm "<startstatefile>" )
|
|
|
|
|
|
# Option: actioncheck
|
|
# Notes.: command executed once before each actionban command
|
|
# Values: CMD
|
|
#
|
|
actioncheck =
|
|
|
|
|
|
# Option: actionban
|
|
# Notes.: command executed when banning an IP. Take care that the
|
|
# command is executed with Fail2Ban user rights.
|
|
# Tags: See jail.conf(5) man page
|
|
# Values: CMD
|
|
#
|
|
# requires an ipfw rule like "deny ip from table(1) to me"
|
|
actionban = e=`ipfw table <table> add <ip> 2>&1`; x=$?; [ $x -eq 0 -o "$e" = 'ipfw: setsockopt(IP_FW_TABLE_XADD): File exists' ] || { echo "$e" 1>&2; exit $x; }
|
|
|
|
|
|
# Option: actionunban
|
|
# Notes.: command executed when unbanning an IP. Take care that the
|
|
# command is executed with Fail2Ban user rights.
|
|
# Tags: See jail.conf(5) man page
|
|
# Values: CMD
|
|
#
|
|
actionunban = e=`ipfw table <table> delete <ip> 2>&1`; x=$?; [ $x -eq 0 -o "$e" = 'ipfw: setsockopt(IP_FW_TABLE_XDEL): No such process' ] || { echo "$e" 1>&2; exit $x; }
|
|
|
|
[Init]
|
|
# Option: table
|
|
# Notes: The ipfw table to use. If a ipfw rule using this table already exists,
|
|
# this action will not create a ipfw rule to block it and the following
|
|
# options will have no effect.
|
|
# Values: NUM
|
|
table = 1
|
|
|
|
# Option: port
|
|
# Notes.: Specifies port to monitor. Blank indicate block all ports.
|
|
# Values: [ NUM | STRING ]
|
|
#
|
|
port =
|
|
|
|
# Option: startstatefile
|
|
# Notes: A file to indicate that the table rule that was added. Ensure it is unique per table.
|
|
# Values: STRING
|
|
startstatefile = /var/run/fail2ban/ipfw-started-table_<table>
|
|
|
|
# Option: block
|
|
# Notes: This is how much to block.
|
|
# Can be "ip", "tcp", "udp" or various other options.
|
|
# Values: STRING
|
|
block = ip
|
|
|
|
# Option: blocktype
|
|
# Notes.: How to block the traffic. Use a action from man 5 ipfw
|
|
# Common values: deny, unreach port, reset
|
|
# ACTION defination at the top of man ipfw for allowed values.
|
|
# Values: STRING
|
|
#
|
|
blocktype = unreach port
|