dde8a3af5e
1) Add a fix for https://github.com/fail2ban/fail2ban/issues/91 (Spurious UTF8 in SYSLOG is not fully fixed) 2) Add a filter for sendmail, the default mailer on FreeBSD 3) Make the ipfw table used in the action bsd-ipfw configurable PR: ports/173956 Submitted by: Christoph Theis <theis@gmx.at> (maintainer)
75 lines
1.7 KiB
Text
75 lines
1.7 KiB
Text
--- /dev/null 2012-11-27 18:04:17.000000000 +0100
|
|
+++ config/action.d/bsd-ipfw.conf 2012-11-27 18:06:29.000000000 +0100
|
|
@@ -0,0 +1,72 @@
|
|
+# Fail2Ban configuration file
|
|
+#
|
|
+# Author: Nick Munger
|
|
+# Modified by: Ken Menzel
|
|
+#
|
|
+
|
|
+[Definition]
|
|
+
|
|
+# Option: actionstart
|
|
+# Notes.: command executed once at the start of Fail2Ban.
|
|
+# Values: CMD
|
|
+#
|
|
+actionstart =
|
|
+
|
|
+
|
|
+# Option: actionstop
|
|
+# Notes.: command executed once at the end of Fail2Ban
|
|
+# Values: CMD
|
|
+#
|
|
+actionstop =
|
|
+
|
|
+
|
|
+# Option: actioncheck
|
|
+# Notes.: command executed once before each actionban command
|
|
+# Values: CMD
|
|
+#
|
|
+actioncheck =
|
|
+
|
|
+
|
|
+# Option: actionban
|
|
+# Notes.: command executed when banning an IP. Take care that the
|
|
+# command is executed with Fail2Ban user rights.
|
|
+# Tags: <ip> IP address
|
|
+# <failures> number of failures
|
|
+# <time> unix timestamp of the ban time
|
|
+# <table> ipfw table to use
|
|
+# Values: CMD
|
|
+#
|
|
+# requires an ipfw rule like "deny ip from table(1) to me"
|
|
+actionban = ipfw table <table> add <ip>
|
|
+
|
|
+
|
|
+# Option: actionunban
|
|
+# Notes.: command executed when unbanning an IP. Take care that the
|
|
+# command is executed with Fail2Ban user rights.
|
|
+# Tags: <ip> IP address
|
|
+# <failures> number of failures
|
|
+# <time> unix timestamp of the ban time
|
|
+# <table> ipfw table to use
|
|
+# Values: CMD
|
|
+#
|
|
+actionunban = ipfw table <table> delete <ip>
|
|
+
|
|
+[Init]
|
|
+
|
|
+# Option: port
|
|
+# Notes.: specifies port to monitor
|
|
+# Values: [ NUM | STRING ]
|
|
+#
|
|
+#port = ssh
|
|
+port = ftp
|
|
+
|
|
+# Option: localhost
|
|
+# Notes.: the local IP address of the network interface
|
|
+# Values: IP
|
|
+#
|
|
+localhost = 127.0.0.1
|
|
+
|
|
+# Option: table
|
|
+# Notes: the ipfw table to use
|
|
+# Values: NUM
|
|
+table = 1
|