diff options
| author | Lukasz Kasprzak <lukasz.kasprzak@pm.me> | 2026-04-14 22:32:43 +0200 |
|---|---|---|
| committer | Lukasz Kasprzak <lukasz.kasprzak@pm.me> | 2026-04-14 22:32:43 +0200 |
| commit | 83f7fe4b8402bab171d110703a1b1115efbc9b28 (patch) | |
| tree | 19110702c7d740f6bd8ee4f5d2ebcb97442be237 /straper/db/public/fail2ban/etc-fail2ban/action.d/ufw.conf | |
| parent | 51d43498b07dc97d795947964534f0903cd05db5 (diff) | |
| download | bin-83f7fe4b8402bab171d110703a1b1115efbc9b28.tar.gz bin-83f7fe4b8402bab171d110703a1b1115efbc9b28.zip | |
cleaned up many scrits and deleted some that were of no use; renamed a lot
Diffstat (limited to 'straper/db/public/fail2ban/etc-fail2ban/action.d/ufw.conf')
| -rw-r--r-- | straper/db/public/fail2ban/etc-fail2ban/action.d/ufw.conf | 75 |
1 files changed, 0 insertions, 75 deletions
diff --git a/straper/db/public/fail2ban/etc-fail2ban/action.d/ufw.conf b/straper/db/public/fail2ban/etc-fail2ban/action.d/ufw.conf deleted file mode 100644 index c9ff7f3..0000000 --- a/straper/db/public/fail2ban/etc-fail2ban/action.d/ufw.conf +++ /dev/null @@ -1,75 +0,0 @@ -# Fail2Ban action configuration file for ufw -# -# You are required to run "ufw enable" before this will have any effect. -# -# The insert position should be appropriate to block the required traffic. -# A number after an allow rule to the application won't be of much use. - -[Definition] - -actionstart = - -actionstop = - -actioncheck = - -# ufw does "quickly process packets for which we already have a connection" in before.rules, -# therefore all related sockets should be closed -# actionban is using `ss` to do so, this only handles IPv4 and IPv6. - -actionban = if [ -n "<application>" ] && ufw app info "<application>" - then - ufw <add> <blocktype> from <ip> to <destination> app "<application>" comment "<comment>" - else - ufw <add> <blocktype> from <ip> to <destination> comment "<comment>" - fi - <kill> - -actionunban = if [ -n "<application>" ] && ufw app info "<application>" - then - ufw delete <blocktype> from <ip> to <destination> app "<application>" - else - ufw delete <blocktype> from <ip> to <destination> - fi - -# Option: kill-mode -# Notes.: can be set to ss or conntrack (may be extended later with other modes) to immediately drop all connections from banned IP, default empty (no kill) -# Example: banaction = ufw[kill-mode=ss] -kill-mode = - -# intern conditional parameter used to provide killing mode after ban: -_kill_ = -_kill_ss = ss -K dst "[<ip>]" -_kill_conntrack = conntrack -D -s "<ip>" - -# Option: kill -# Notes.: can be used to specify custom killing feature, by default depending on option kill-mode -# Examples: banaction = ufw[kill='ss -K "( sport = :http || sport = :https )" dst "[<ip>]"'] -# banaction = ufw[kill='cutter "<ip>"'] -kill = <_kill_<kill-mode>> - -[Init] -# Option: add -# Notes.: can be set to "insert 1" to insert a rule at certain position (here 1): -add = prepend - -# Option: blocktype -# Notes.: reject or deny -blocktype = reject - -# Option: destination -# Notes.: The destination address to block in the ufw rule -destination = any - -# Option: application -# Notes.: application from sudo ufw app list -application = - -# Option: comment -# Notes.: comment for rule added by fail2ban -comment = by Fail2Ban after <failures> attempts against <name> - -# DEV NOTES: -# -# Author: Guilhem Lettron -# Enhancements: Daniel Black |
