From 83f7fe4b8402bab171d110703a1b1115efbc9b28 Mon Sep 17 00:00:00 2001 From: Lukasz Kasprzak Date: Tue, 14 Apr 2026 22:32:43 +0200 Subject: cleaned up many scrits and deleted some that were of no use; renamed a lot --- .../public/fail2ban/etc-fail2ban/action.d/ufw.conf | 75 ---------------------- 1 file changed, 75 deletions(-) delete mode 100644 straper/db/public/fail2ban/etc-fail2ban/action.d/ufw.conf (limited to 'straper/db/public/fail2ban/etc-fail2ban/action.d/ufw.conf') diff --git a/straper/db/public/fail2ban/etc-fail2ban/action.d/ufw.conf b/straper/db/public/fail2ban/etc-fail2ban/action.d/ufw.conf deleted file mode 100644 index c9ff7f3..0000000 --- a/straper/db/public/fail2ban/etc-fail2ban/action.d/ufw.conf +++ /dev/null @@ -1,75 +0,0 @@ -# Fail2Ban action configuration file for ufw -# -# You are required to run "ufw enable" before this will have any effect. -# -# The insert position should be appropriate to block the required traffic. -# A number after an allow rule to the application won't be of much use. - -[Definition] - -actionstart = - -actionstop = - -actioncheck = - -# ufw does "quickly process packets for which we already have a connection" in before.rules, -# therefore all related sockets should be closed -# actionban is using `ss` to do so, this only handles IPv4 and IPv6. - -actionban = if [ -n "" ] && ufw app info "" - then - ufw from to app "" comment "" - else - ufw from to comment "" - fi - - -actionunban = if [ -n "" ] && ufw app info "" - then - ufw delete from to app "" - else - ufw delete from to - fi - -# Option: kill-mode -# Notes.: can be set to ss or conntrack (may be extended later with other modes) to immediately drop all connections from banned IP, default empty (no kill) -# Example: banaction = ufw[kill-mode=ss] -kill-mode = - -# intern conditional parameter used to provide killing mode after ban: -_kill_ = -_kill_ss = ss -K dst "[]" -_kill_conntrack = conntrack -D -s "" - -# Option: kill -# Notes.: can be used to specify custom killing feature, by default depending on option kill-mode -# Examples: banaction = ufw[kill='ss -K "( sport = :http || sport = :https )" dst "[]"'] -# banaction = ufw[kill='cutter ""'] -kill = <_kill_> - -[Init] -# Option: add -# Notes.: can be set to "insert 1" to insert a rule at certain position (here 1): -add = prepend - -# Option: blocktype -# Notes.: reject or deny -blocktype = reject - -# Option: destination -# Notes.: The destination address to block in the ufw rule -destination = any - -# Option: application -# Notes.: application from sudo ufw app list -application = - -# Option: comment -# Notes.: comment for rule added by fail2ban -comment = by Fail2Ban after attempts against - -# DEV NOTES: -# -# Author: Guilhem Lettron -# Enhancements: Daniel Black -- cgit v1.3