aboutsummaryrefslogtreecommitdiff
path: root/straper/db/public/fail2ban/etc-fail2ban/action.d/iptables-ipset-proto4.conf
diff options
context:
space:
mode:
authorLukasz Kasprzak <lukasz.kasprzak@pm.me>2026-04-14 22:32:43 +0200
committerLukasz Kasprzak <lukasz.kasprzak@pm.me>2026-04-14 22:32:43 +0200
commit83f7fe4b8402bab171d110703a1b1115efbc9b28 (patch)
tree19110702c7d740f6bd8ee4f5d2ebcb97442be237 /straper/db/public/fail2ban/etc-fail2ban/action.d/iptables-ipset-proto4.conf
parent51d43498b07dc97d795947964534f0903cd05db5 (diff)
downloadbin-83f7fe4b8402bab171d110703a1b1115efbc9b28.tar.gz
bin-83f7fe4b8402bab171d110703a1b1115efbc9b28.zip
cleaned up many scrits and deleted some that were of no use; renamed a lot
Diffstat (limited to 'straper/db/public/fail2ban/etc-fail2ban/action.d/iptables-ipset-proto4.conf')
-rw-r--r--straper/db/public/fail2ban/etc-fail2ban/action.d/iptables-ipset-proto4.conf74
1 files changed, 0 insertions, 74 deletions
diff --git a/straper/db/public/fail2ban/etc-fail2ban/action.d/iptables-ipset-proto4.conf b/straper/db/public/fail2ban/etc-fail2ban/action.d/iptables-ipset-proto4.conf
deleted file mode 100644
index 51648db..0000000
--- a/straper/db/public/fail2ban/etc-fail2ban/action.d/iptables-ipset-proto4.conf
+++ /dev/null
@@ -1,74 +0,0 @@
-# Fail2Ban configuration file
-#
-# Author: Daniel Black
-#
-# This is for ipset protocol 4 (ipset v4.2). If you have a later version
-# of ipset try to use the iptables-ipset-proto6.conf as it does some things
-# nicer.
-#
-# This requires the program ipset which is normally in package called ipset.
-#
-# IPset was a feature introduced in the linux kernel 2.6.39 and 3.0.0 kernels.
-#
-# If you are running on an older kernel you make need to patch in external
-# modules. Debian squeeze can do this with:
-# apt-get install xtables-addons-source
-# module-assistant auto-install xtables-addons
-#
-# Debian wheezy and above uses protocol 6
-
-[INCLUDES]
-
-before = iptables.conf
-
-[Definition]
-
-# Option: actionstart
-# Notes.: command executed on demand at the first ban (or at the start of Fail2Ban if actionstart_on_demand is set to false).
-# Values: CMD
-#
-actionstart = ipset --create f2b-<name> maxelem <maxelem> iphash
- <_ipt_add_rules>
-
-
-# Option: actionflush
-# Notes.: command executed once to flush IPS, by shutdown (resp. by stop of the jail or this action)
-# Values: CMD
-#
-actionflush = ipset --flush f2b-<name>
-
-# Option: actionstop
-# Notes.: command executed at the stop of jail (or at the end of Fail2Ban)
-# Values: CMD
-#
-actionstop = <_ipt_del_rules>
- <actionflush>
- ipset --destroy f2b-<name>
-
-# Option: actionban
-# Notes.: command executed when banning an IP. Take care that the
-# command is executed with Fail2Ban user rights.
-# Tags: See jail.conf(5) man page
-# Values: CMD
-#
-actionban = ipset --test f2b-<name> <ip> || ipset --add f2b-<name> <ip>
-
-# Option: actionunban
-# Notes.: command executed when unbanning an IP. Take care that the
-# command is executed with Fail2Ban user rights.
-# Tags: See jail.conf(5) man page
-# Values: CMD
-#
-actionunban = ipset --test f2b-<name> <ip> && ipset --del f2b-<name> <ip>
-
-# Several capabilities used internally:
-
-rule-jump = -m set --match-set f2b-<name> src -j <blocktype>
-
-[Init]
-
-# Option: maxelem
-# Notes: maximal number of elements which can be stored in the ipset
-# You may want to increase this for long-duration/high-volume jails
-# Values: [ NUM ] Default: 65536
-maxelem = 65536