diff options
| author | Lukasz Kasprzak <lukasz.kasprzak@pm.me> | 2026-04-14 22:32:43 +0200 |
|---|---|---|
| committer | Lukasz Kasprzak <lukasz.kasprzak@pm.me> | 2026-04-14 22:32:43 +0200 |
| commit | 83f7fe4b8402bab171d110703a1b1115efbc9b28 (patch) | |
| tree | 19110702c7d740f6bd8ee4f5d2ebcb97442be237 /straper/db/public/fail2ban/etc-fail2ban/action.d/route.conf | |
| parent | 51d43498b07dc97d795947964534f0903cd05db5 (diff) | |
| download | bin-83f7fe4b8402bab171d110703a1b1115efbc9b28.tar.gz bin-83f7fe4b8402bab171d110703a1b1115efbc9b28.zip | |
cleaned up many scrits and deleted some that were of no use; renamed a lot
Diffstat (limited to 'straper/db/public/fail2ban/etc-fail2ban/action.d/route.conf')
| -rw-r--r-- | straper/db/public/fail2ban/etc-fail2ban/action.d/route.conf | 29 |
1 files changed, 0 insertions, 29 deletions
diff --git a/straper/db/public/fail2ban/etc-fail2ban/action.d/route.conf b/straper/db/public/fail2ban/etc-fail2ban/action.d/route.conf deleted file mode 100644 index 9b96a7b..0000000 --- a/straper/db/public/fail2ban/etc-fail2ban/action.d/route.conf +++ /dev/null @@ -1,29 +0,0 @@ -# Fail2Ban configuration file -# -# Author: Michael Gebetsroither -# -# This is for blocking whole hosts through blackhole routes. -# -# PRO: -# - Works on all kernel versions and as no compatibility problems (back to debian lenny and WAY further). -# - It's FAST for very large numbers of blocked ips. -# - It's FAST because it Blocks traffic before it enters common iptables chains used for filtering. -# - It's per host, ideal as action against ssh password bruteforcing to block further attack attempts. -# - No additional software required beside iproute/iproute2 -# -# CON: -# - Blocking is per IP and NOT per service, but ideal as action against ssh password bruteforcing hosts - -[Definition] -actionban = ip route add <blocktype> <ip> -actionunban = ip route del <blocktype> <ip> -actioncheck = -actionstart = -actionstop = - -[Init] - -# Option: blocktype -# Note: Type can be blackhole, unreachable and prohibit. Unreachable and prohibit correspond to the ICMP reject messages. -# Values: STRING -blocktype = unreachable |
