diff options
Diffstat (limited to 'straper/db/public/fail2ban/etc-fail2ban/action.d/route.conf')
| -rw-r--r-- | straper/db/public/fail2ban/etc-fail2ban/action.d/route.conf | 29 |
1 files changed, 0 insertions, 29 deletions
diff --git a/straper/db/public/fail2ban/etc-fail2ban/action.d/route.conf b/straper/db/public/fail2ban/etc-fail2ban/action.d/route.conf deleted file mode 100644 index 9b96a7b..0000000 --- a/straper/db/public/fail2ban/etc-fail2ban/action.d/route.conf +++ /dev/null @@ -1,29 +0,0 @@ -# Fail2Ban configuration file -# -# Author: Michael Gebetsroither -# -# This is for blocking whole hosts through blackhole routes. -# -# PRO: -# - Works on all kernel versions and as no compatibility problems (back to debian lenny and WAY further). -# - It's FAST for very large numbers of blocked ips. -# - It's FAST because it Blocks traffic before it enters common iptables chains used for filtering. -# - It's per host, ideal as action against ssh password bruteforcing to block further attack attempts. -# - No additional software required beside iproute/iproute2 -# -# CON: -# - Blocking is per IP and NOT per service, but ideal as action against ssh password bruteforcing hosts - -[Definition] -actionban = ip route add <blocktype> <ip> -actionunban = ip route del <blocktype> <ip> -actioncheck = -actionstart = -actionstop = - -[Init] - -# Option: blocktype -# Note: Type can be blackhole, unreachable and prohibit. Unreachable and prohibit correspond to the ICMP reject messages. -# Values: STRING -blocktype = unreachable |