1 files changed, 25 insertions, 0 deletions
diff --git a/straper/db/public/fail2ban/etc-fail2ban/action.d/apf.conf b/straper/db/public/fail2ban/etc-fail2ban/action.d/apf.conf
new file mode 100644
index 0000000..5c4a261
--- /dev/null
+++ b/straper/db/public/fail2ban/etc-fail2ban/action.d/apf.conf
@@ -0,0 +1,25 @@
+# Fail2Ban configuration file
+# https://www.rfxn.com/projects/advanced-policy-firewall/
+#
+# Note: APF doesn't play nicely with other actions. It has been observed to
+# remove bans created by other iptables based actions. If you are going to use
+# this action, use it for all of your jails.
+#
+# DON'T MIX APF and other IPTABLES based actions
+[Definition]
+
+actionstart = 
+actionstop = 
+actioncheck = 
+actionban = apf --deny <ip> "banned by Fail2Ban <name>"
+actionunban = apf --remove <ip>
+
+[Init]
+
+# Name used in APF configuration
+#
+name = default
+
+# DEV NOTES:
+#
+# Author: Mark McKinstry