diff options
| author | Yaroslav Halchenko <debian@onerussian.com> | 2011-03-23 20:36:41 +0000 |
|---|---|---|
| committer | Yaroslav Halchenko <debian@onerussian.com> | 2011-03-23 20:36:41 +0000 |
| commit | 3831fbf98b87fed2f5882e3190e10dfa0dd0e55c (patch) | |
| tree | 402ea17d6e731decc9f65fe01a9eca1b8128760c /config/action.d/iptables.conf | |
| parent | 6558c03f8e138eaadcb2fa4b6bc93dad737a71fd (diff) | |
| download | fail2ban-3831fbf98b87fed2f5882e3190e10dfa0dd0e55c.tar.gz | |
ENH: add <chain> to action.d/iptables*. Thanks Matthijs Kooijman: see http://bugs.debian.org/515599
git-svn-id: https://fail2ban.svn.sourceforge.net/svnroot/fail2ban/branches/FAIL2BAN-0_8@771 a942ae1a-1317-0410-a47c-b1dcaea8d605
Diffstat (limited to 'config/action.d/iptables.conf')
| -rw-r--r-- | config/action.d/iptables.conf | 11 |
1 files changed, 8 insertions, 3 deletions
diff --git a/config/action.d/iptables.conf b/config/action.d/iptables.conf index daef9267..09cfb98b 100644 --- a/config/action.d/iptables.conf +++ b/config/action.d/iptables.conf @@ -13,13 +13,13 @@ # actionstart = iptables -N fail2ban-<name> iptables -A fail2ban-<name> -j RETURN - iptables -I INPUT -p <protocol> --dport <port> -j fail2ban-<name> + iptables -I <chain> -p <protocol> --dport <port> -j fail2ban-<name> # Option: actionstop # Notes.: command executed once at the end of Fail2Ban # Values: CMD # -actionstop = iptables -D INPUT -p <protocol> --dport <port> -j fail2ban-<name> +actionstop = iptables -D <chain> -p <protocol> --dport <port> -j fail2ban-<name> iptables -F fail2ban-<name> iptables -X fail2ban-<name> @@ -27,7 +27,7 @@ actionstop = iptables -D INPUT -p <protocol> --dport <port> -j fail2ban-<name> # Notes.: command executed once before each actionban command # Values: CMD # -actioncheck = iptables -n -L INPUT | grep -q fail2ban-<name> +actioncheck = iptables -n -L <chain> | grep -q fail2ban-<name> # Option: actionban # Notes.: command executed when banning an IP. Take care that the @@ -67,3 +67,8 @@ port = ssh # protocol = tcp +# Option: chain +# Notes specifies the iptables chain to which the fail2ban rules should be +# added +# Values: STRING Default: INPUT +chain = INPUT |