aboutsummaryrefslogtreecommitdiff
path: root/straper/db/public/fail2ban/etc-fail2ban/jail.local
blob: 5368de7c7f9e83c716b7f0a8e4bbcbe35c6c5b95 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
[DEFAULT]
banaction = nftables-allports
banaction_allports = nftables-allports
backend = systemd
destemail = root
sender = fail2ban@sanctum
action = %(action_mw)s
bantime = 604800
findtime = 3600
maxretry = 3
ignoreip = 127.0.0.1/8 ::1 192.168.33.0/24

[sshd-session-preauth]
enabled = true
action = nftables-allports[name=sshd-session-preauth, addr_set_options="flags interval;"]

[sshd]
enabled = true
filter = sshd-session-preauth
journalmatch = _SYSTEMD_UNIT=ssh.service + _COMM=sshd-session
action = nftables-allports[name=sshd, addr_set_options="flags interval;"]