aboutsummaryrefslogtreecommitdiff
path: root/straper/db/public/fail2ban/etc-fail2ban/action.d/firewallcmd-common.conf
diff options
context:
space:
mode:
Diffstat (limited to 'straper/db/public/fail2ban/etc-fail2ban/action.d/firewallcmd-common.conf')
-rw-r--r--straper/db/public/fail2ban/etc-fail2ban/action.d/firewallcmd-common.conf76
1 files changed, 0 insertions, 76 deletions
diff --git a/straper/db/public/fail2ban/etc-fail2ban/action.d/firewallcmd-common.conf b/straper/db/public/fail2ban/etc-fail2ban/action.d/firewallcmd-common.conf
deleted file mode 100644
index 4abe531..0000000
--- a/straper/db/public/fail2ban/etc-fail2ban/action.d/firewallcmd-common.conf
+++ /dev/null
@@ -1,76 +0,0 @@
-# Fail2Ban configuration file
-#
-# Author: Donald Yandt
-#
-
-[Init]
-
-# Option: name
-# Notes Default name of the chain
-# Values: STRING
-name = default
-
-# Option port
-# Notes Can also use port numbers separated by a comma and in rich-rules comma and/or space.
-# Value STRING Default: 1:65535
-port = 1:65535
-
-# Option: protocol
-# Notes [ tcp | udp | icmp | all ]
-# Values: STRING Default: tcp
-protocol = tcp
-
-# Option: family(ipv4)
-# Notes specifies the socket address family type
-# Values: STRING
-family = ipv4
-
-# Option: chain
-# Notes specifies the firewalld chain to which the Fail2Ban rules should be
-# added
-# Values: STRING Default: INPUT_direct
-chain = INPUT_direct
-
-# Option: zone
-# Notes use command firewall-cmd --get-active-zones to see a list of all active zones. See firewalld man pages for more information on zones
-# Values: STRING Default: public
-zone = public
-
-# Option: service
-# Notes use command firewall-cmd --get-services to see a list of services available
-# Examples services: amanda-client amanda-k5-client bacula bacula-client dhcp dhcpv6 dhcpv6-client dns freeipa-ldap freeipa-ldaps
-# freeipa-replication ftp high-availability http https imaps ipp ipp-client ipsec iscsi-target kadmin kerberos
-# kpasswd ldap ldaps libvirt libvirt-tls mdns mosh mountd ms-wbt mysql nfs ntp openvpn pmcd pmproxy pmwebapi pmwebapis pop3s
-# postgresql privoxy proxy-dhcp puppetmaster radius rpc-bind rsyncd samba samba-client sane smtp squid ssh synergy
-# telnet tftp tftp-client tinc tor-socks transmission-client vdsm vnc-server wbem-https xmpp-bosh xmpp-client xmpp-local xmpp-server
-# Values: STRING Default: ssh
-service = ssh
-
-# Option: rejecttype (ipv4)
-# Notes See iptables/firewalld man pages for ipv4 reject types.
-# Values: STRING
-rejecttype = icmp-port-unreachable
-
-# Option: blocktype (ipv4/ipv6)
-# Notes See iptables/firewalld man pages for jump targets. Common values are REJECT,
-# REJECT --reject-with icmp-port-unreachable, DROP
-# Values: STRING
-blocktype = REJECT --reject-with <rejecttype>
-
-# Option: rich-blocktype (ipv4/ipv6)
-# Notes See firewalld man pages for jump targets. Common values are reject,
-# reject type="icmp-port-unreachable", drop
-# Values: STRING
-rich-blocktype = reject type='<rejecttype>'
-
-[Init?family=inet6]
-
-# Option: family(ipv6)
-# Notes specifies the socket address family type
-# Values: STRING
-family = ipv6
-
-# Option: rejecttype (ipv6)
-# Note: See iptables/firewalld man pages for ipv6 reject types.
-# Values: STRING
-rejecttype = icmp6-port-unreachable