From 83f7fe4b8402bab171d110703a1b1115efbc9b28 Mon Sep 17 00:00:00 2001 From: Lukasz Kasprzak Date: Tue, 14 Apr 2026 22:32:43 +0200 Subject: cleaned up many scrits and deleted some that were of no use; renamed a lot --- .../fail2ban/etc-fail2ban/action.d/nsupdate.conf | 114 --------------------- 1 file changed, 114 deletions(-) delete mode 100644 straper/db/public/fail2ban/etc-fail2ban/action.d/nsupdate.conf (limited to 'straper/db/public/fail2ban/etc-fail2ban/action.d/nsupdate.conf') diff --git a/straper/db/public/fail2ban/etc-fail2ban/action.d/nsupdate.conf b/straper/db/public/fail2ban/etc-fail2ban/action.d/nsupdate.conf deleted file mode 100644 index ef56c6b..0000000 --- a/straper/db/public/fail2ban/etc-fail2ban/action.d/nsupdate.conf +++ /dev/null @@ -1,114 +0,0 @@ -# Fail2Ban configuration file -# -# Author: Andrew St. Jean -# -# Use nsupdate to perform dynamic DNS updates on a BIND zone file. -# One may want to do this to update a local RBL with banned IP addresses. -# -# Options -# -# domain DNS domain that will appear in nsupdate add and delete -# commands. -# -# ttl The time to live (TTL) in seconds of the TXT resource -# record. -# -# rdata Data portion of the TXT resource record. -# -# nsupdatecmd Full path to the nsupdate command. -# -# keyfile Full path to TSIG key file used for authentication between -# nsupdate and BIND. -# -# Create an nsupdate.local to set at least the and -# options as they don't have default values. -# -# The ban and unban commands assume nsupdate will authenticate to the BIND -# server using a TSIG key. The full path to the key file must be specified -# in the parameter. Use this command to generate your TSIG key. -# -# dnssec-keygen -a HMAC-MD5 -b 256 -n HOST -# -# Replace with some meaningful name. -# -# This command will generate two files. Specify the .private file in the -# option. Note that the .key file must also be present in the same -# directory for nsupdate to use the key. -# -# Don't forget to add the key and appropriate allow-update or update-policy -# option to your named.conf file. -# - -[Definition] - -# Option: actionstart -# Notes.: command executed on demand at the first ban (or at the start of Fail2Ban if actionstart_on_demand is set to false). -# Values: CMD -# -actionstart = - - -# Option: actionstop -# Notes.: command executed at the stop of jail (or at the end of Fail2Ban) -# Values: CMD -# -actionstop = - - -# Option: actioncheck -# Notes.: command executed once before each actionban command -# Values: CMD -# -actioncheck = - -# Option: actionban -# Notes.: command executed when banning an IP. Take care that the -# command is executed with Fail2Ban user rights. -# Tags: See jail.conf(5) man page -# Values: CMD -# -actionban = echo | awk -F. '{print "prereq nxrrset "$4"."$3"."$2"."$1". TXT"; print "update add "$4"."$3"."$2"."$1". IN TXT \"\""; print "send"}' | -k - -# Option: actionunban -# Notes.: command executed when unbanning an IP. Take care that the -# command is executed with Fail2Ban user rights. -# Tags: See jail.conf(5) man page -# Values: CMD -# -actionunban = echo | awk -F. '{print "update delete "$4"."$3"."$2"."$1"."; print "send"}' | -k - -[Init] - -# Option: domain -# Notes.: DNS domain that nsupdate will update. -# Values: STRING -# -domain = - -# Option: ttl -# Notes.: time to live (TTL) in seconds of TXT resource record -# added by nsupdate. -# Values: NUM -# -ttl = 60 - -# Option: rdata -# Notes.: data portion of the TXT resource record added by nsupdate. -# Values: STRING -# -rdata = Your IP has been banned - -# Option: nsupdatecmd -# Notes.: specifies the full path to the nsupdate program that dynamically -# updates BIND zone files. -# Values: CMD -# -nsupdatecmd = /usr/bin/nsupdate - -# Option: keyfile -# Notes.: specifies the full path to the file containing the -# TSIG key for communicating with BIND. -# Values: STRING -# -keyfile = - -- cgit v1.3