diff options
| author | Lukasz Kasprzak <lukasz.kasprzak@pm.me> | 2026-04-14 22:32:43 +0200 |
|---|---|---|
| committer | Lukasz Kasprzak <lukasz.kasprzak@pm.me> | 2026-04-14 22:32:43 +0200 |
| commit | 83f7fe4b8402bab171d110703a1b1115efbc9b28 (patch) | |
| tree | 19110702c7d740f6bd8ee4f5d2ebcb97442be237 /straper/db/public/fail2ban/etc-fail2ban/action.d/firewallcmd-rich-rules.conf | |
| parent | 51d43498b07dc97d795947964534f0903cd05db5 (diff) | |
| download | bin-83f7fe4b8402bab171d110703a1b1115efbc9b28.tar.gz bin-83f7fe4b8402bab171d110703a1b1115efbc9b28.zip | |
cleaned up many scrits and deleted some that were of no use; renamed a lot
Diffstat (limited to 'straper/db/public/fail2ban/etc-fail2ban/action.d/firewallcmd-rich-rules.conf')
| -rw-r--r-- | straper/db/public/fail2ban/etc-fail2ban/action.d/firewallcmd-rich-rules.conf | 44 |
1 files changed, 0 insertions, 44 deletions
diff --git a/straper/db/public/fail2ban/etc-fail2ban/action.d/firewallcmd-rich-rules.conf b/straper/db/public/fail2ban/etc-fail2ban/action.d/firewallcmd-rich-rules.conf deleted file mode 100644 index 75a27d8..0000000 --- a/straper/db/public/fail2ban/etc-fail2ban/action.d/firewallcmd-rich-rules.conf +++ /dev/null @@ -1,44 +0,0 @@ -# Fail2Ban configuration file -# -# Author: Donald Yandt -# -# Because of the rich rule commands requires firewalld-0.3.1+ -# This action uses firewalld rich-rules which gives you a cleaner iptables since it stores rules according to zones and not -# by chain. So for an example all deny rules will be listed under <zone>_deny. -# -# If you use the --permanent rule you get a xml file in /etc/firewalld/zones/<zone>.xml that can be shared and parsed easliy -# -# Example commands to view rules: -# firewall-cmd [--zone=<zone>] --list-rich-rules -# firewall-cmd [--zone=<zone>] --list-all -# firewall-cmd [--zone=zone] --query-rich-rule='rule' - -[INCLUDES] - -before = firewallcmd-common.conf - -[Definition] - -actionstart = - -actionstop = - -actioncheck = - -#you can also use zones and/or service names. -# -# zone example: -# firewall-cmd --zone=<zone> --add-rich-rule="rule family='ipv4' source address='<ip>' port port='<port>' protocol='<protocol>' <rich-blocktype>" -# -# service name example: -# firewall-cmd --zone=<zone> --add-rich-rule="rule family='ipv4' source address='<ip>' service name='<service>' <rich-blocktype>" -# -# Because rich rules can only handle single or a range of ports we must split ports and execute the command for each port. Ports can be single and ranges separated by a comma or space for an example: http, https, 22-60, 18 smtp - -fwcmd_rich_rule = rule family='<family>' source address='<ip>' port port='$p' protocol='<protocol>' %(rich-suffix)s - -actionban = ports="<port>"; for p in $(echo $ports | tr ", " " "); do firewall-cmd --add-rich-rule="%(fwcmd_rich_rule)s"; done - -actionunban = ports="<port>"; for p in $(echo $ports | tr ", " " "); do firewall-cmd --remove-rich-rule="%(fwcmd_rich_rule)s"; done - -rich-suffix = <rich-blocktype>
\ No newline at end of file |