aboutsummaryrefslogtreecommitdiff
path: root/straper/db/public/fail2ban/etc-fail2ban/action.d/osx-ipfw.conf
diff options
context:
space:
mode:
authorLukasz Kasprzak <lukasz.kasprzak@pm.me>2026-04-14 22:32:43 +0200
committerLukasz Kasprzak <lukasz.kasprzak@pm.me>2026-04-14 22:32:43 +0200
commit83f7fe4b8402bab171d110703a1b1115efbc9b28 (patch)
tree19110702c7d740f6bd8ee4f5d2ebcb97442be237 /straper/db/public/fail2ban/etc-fail2ban/action.d/osx-ipfw.conf
parent51d43498b07dc97d795947964534f0903cd05db5 (diff)
downloadbin-83f7fe4b8402bab171d110703a1b1115efbc9b28.tar.gz
bin-83f7fe4b8402bab171d110703a1b1115efbc9b28.zip
cleaned up many scrits and deleted some that were of no use; renamed a lot
Diffstat (limited to 'straper/db/public/fail2ban/etc-fail2ban/action.d/osx-ipfw.conf')
-rw-r--r--straper/db/public/fail2ban/etc-fail2ban/action.d/osx-ipfw.conf87
1 files changed, 0 insertions, 87 deletions
diff --git a/straper/db/public/fail2ban/etc-fail2ban/action.d/osx-ipfw.conf b/straper/db/public/fail2ban/etc-fail2ban/action.d/osx-ipfw.conf
deleted file mode 100644
index 6ff6afd..0000000
--- a/straper/db/public/fail2ban/etc-fail2ban/action.d/osx-ipfw.conf
+++ /dev/null
@@ -1,87 +0,0 @@
-# Fail2Ban configuration file
-#
-# Author: Nick Munger
-# Modified by: Andy Fragen and Daniel Black
-#
-# Mod for OS X, using random rulenum as OSX ipfw doesn't include tables
-#
-
-[Definition]
-
-# Option: actionstart
-# Notes.: command executed on demand at the first ban (or at the start of Fail2Ban if actionstart_on_demand is set to false).
-# Values: CMD
-#
-actionstart =
-
-
-# Option: actionstop
-# Notes.: command executed at the stop of jail (or at the end of Fail2Ban)
-# Values: CMD
-#
-actionstop =
-
-
-# Option: actioncheck
-# Notes.: command executed once before each actionban command
-# Values: CMD
-#
-actioncheck =
-
-
-# Option: actionban
-# Notes.: command executed when banning an IP. Take care that the
-# command is executed with Fail2Ban user rights.
-# Tags: <ip> IP address
-# Values: CMD
-#
-actionban = ipfw add <rulenum> set <setnum> <blocktype> log <block> from <ip> to <dst> <port>
-
-
-# Option: actionunban
-# Notes.: command executed when unbanning an IP. Take care that the
-# command is executed with Fail2Ban user rights.
-# Tags: <ip> IP address
-# Values: CMD
-#
-actionunban = ipfw delete `ipfw -S list | grep -i 'set <setnum> <blocktype> log <block> from <ip> to <dst>' | awk '{print $1;}'`
-
-[Init]
-
-# Option: port
-# Notes.: specifies port to block. Can be blank however may require block="ip"
-# Values: [ NUM | STRING ]
-#
-port = ssh
-
-# Option: dst
-# Notes.: the local IP address of the network interface
-# Values: IP, any, me or anything support by ipfw as a dst
-#
-dst = me
-
-# Option: block
-# Notes: This is how much to block.
-# Can be "ip", "tcp", "udp" or various other options.
-# Values: STRING
-block = tcp
-
-# Option: blocktype
-# Notes.: How to block the traffic. Use a action from man 8 ipfw
-# Common values: deny, unreach port, reset
-# Values: STRING
-#
-blocktype = unreach port
-
-# Option: set number
-# Notes.: The ipset number this is added to.
-# Values: 0-31
-setnum = 10
-
-# Option: number for ipfw rule
-# Notes: This is meant to be automatically generated and not overwritten
-# Values: Random value between 10000 and 12000
-rulenum="`echo $((RANDOM%%2000+10000))`"
-
-# Duplicate prevention mechanism
-#rulenum = "`a=$((RANDOM%%2000+10000)); while ipfw show | grep -q ^$a\ ; do a=$((RANDOM%%2000+10000)); done; echo $a`"