aboutsummaryrefslogtreecommitdiff
path: root/straper/db/public/fail2ban/etc-fail2ban/action.d/iptables-ipset.conf
diff options
context:
space:
mode:
authorLukasz Kasprzak <lukasz.kasprzak@pm.me>2026-04-14 22:32:43 +0200
committerLukasz Kasprzak <lukasz.kasprzak@pm.me>2026-04-14 22:32:43 +0200
commit83f7fe4b8402bab171d110703a1b1115efbc9b28 (patch)
tree19110702c7d740f6bd8ee4f5d2ebcb97442be237 /straper/db/public/fail2ban/etc-fail2ban/action.d/iptables-ipset.conf
parent51d43498b07dc97d795947964534f0903cd05db5 (diff)
downloadbin-83f7fe4b8402bab171d110703a1b1115efbc9b28.tar.gz
bin-83f7fe4b8402bab171d110703a1b1115efbc9b28.zip
cleaned up many scrits and deleted some that were of no use; renamed a lot
Diffstat (limited to 'straper/db/public/fail2ban/etc-fail2ban/action.d/iptables-ipset.conf')
-rw-r--r--straper/db/public/fail2ban/etc-fail2ban/action.d/iptables-ipset.conf96
1 files changed, 0 insertions, 96 deletions
diff --git a/straper/db/public/fail2ban/etc-fail2ban/action.d/iptables-ipset.conf b/straper/db/public/fail2ban/etc-fail2ban/action.d/iptables-ipset.conf
deleted file mode 100644
index 07f8941..0000000
--- a/straper/db/public/fail2ban/etc-fail2ban/action.d/iptables-ipset.conf
+++ /dev/null
@@ -1,96 +0,0 @@
-# Fail2Ban configuration file
-#
-# Authors: Sergey G Brester (sebres), Daniel Black, Alexander Koeppe
-#
-# This is for ipset protocol 6 (and hopefully later) (ipset v6.14).
-# Use ipset -V to see the protocol and version. Version 4 should use
-# iptables-ipset-proto4.conf.
-#
-# This requires the program ipset which is normally in package called ipset.
-#
-# IPset was a feature introduced in the linux kernel 2.6.39 and 3.0.0 kernels.
-#
-# If you are running on an older kernel you make need to patch in external
-# modules.
-#
-
-[INCLUDES]
-
-before = iptables.conf
-
-[Definition]
-
-# Option: actionstart
-# Notes.: command executed on demand at the first ban (or at the start of Fail2Ban if actionstart_on_demand is set to false).
-# Values: CMD
-#
-actionstart = ipset -exist create <ipmset> hash:ip timeout <default-ipsettime> maxelem <maxelem> <familyopt>
- <_ipt_add_rules>
-
-# Option: actionflush
-# Notes.: command executed once to flush IPS, by shutdown (resp. by stop of the jail or this action)
-# Values: CMD
-#
-actionflush = ipset flush <ipmset>
-
-# Option: actionstop
-# Notes.: command executed at the stop of jail (or at the end of Fail2Ban)
-# Values: CMD
-#
-actionstop = <_ipt_del_rules>
- <actionflush>
- ipset destroy <ipmset>
-
-# Option: actionban
-# Notes.: command executed when banning an IP. Take care that the
-# command is executed with Fail2Ban user rights.
-# Tags: See jail.conf(5) man page
-# Values: CMD
-#
-actionban = ipset -exist add <ipmset> <ip> timeout <ipsettime>
-
-# actionprolong = %(actionban)s
-
-# Option: actionunban
-# Notes.: command executed when unbanning an IP. Take care that the
-# command is executed with Fail2Ban user rights.
-# Tags: See jail.conf(5) man page
-# Values: CMD
-#
-actionunban = ipset -exist del <ipmset> <ip>
-
-# Several capabilities used internally:
-
-rule-jump = -m set --match-set <ipmset> src -j <blocktype>
-
-
-[Init]
-
-# Option: default-ipsettime
-# Notes: specifies default timeout in seconds (handled default ipset timeout only)
-# Values: [ NUM ] Default: 0 (no timeout, managed by fail2ban by unban)
-default-ipsettime = 0
-
-# Option: ipsettime
-# Notes: specifies ticket timeout (handled ipset timeout only)
-# Values: [ NUM ] Default: 0 (managed by fail2ban by unban)
-ipsettime = 0
-
-# Option: maxelem
-# Notes: maximal number of elements which can be stored in the ipset
-# You may want to increase this for long-duration/high-volume jails
-# Values: [ NUM ] Default: 65536
-maxelem = 65536
-
-# expression to calculate timeout from bantime, example:
-# banaction = %(known/banaction)s[ipsettime='<timeout-bantime>']
-timeout-bantime = $([ "<bantime>" -le 2147483 ] && echo "<bantime>" || echo 0)
-
-ipmset = f2b-<name>
-familyopt =
-
-
-[Init?family=inet6]
-
-ipmset = f2b-<name>6
-familyopt = family inet6