diff options
| author | Guilhem Moulin <guilhem@fripost.org> | 2022-12-14 12:01:33 +0100 |
|---|---|---|
| committer | Guilhem Moulin <guilhem@fripost.org> | 2022-12-18 13:29:34 +0100 |
| commit | 7ea3baad594b889f6f7f4e7e4ccc4dc7c0099bc6 (patch) | |
| tree | 211a5c2004e22bc858c00560bbd37e1137b07816 /roles/common/files/etc/fail2ban | |
| parent | c854664b9043e9a04fe0115fb115643543eddf6f (diff) | |
Improve Debian 11's fail2ban rules.
Diffstat (limited to 'roles/common/files/etc/fail2ban')
| -rw-r--r-- | roles/common/files/etc/fail2ban/action.d/nftables-allports.local | 6 | ||||
| -rw-r--r-- | roles/common/files/etc/fail2ban/fail2ban.local | 11 |
2 files changed, 3 insertions, 14 deletions
diff --git a/roles/common/files/etc/fail2ban/action.d/nftables-allports.local b/roles/common/files/etc/fail2ban/action.d/nftables-allports.local index 3c8c030..3b9ebc8 100644 --- a/roles/common/files/etc/fail2ban/action.d/nftables-allports.local +++ b/roles/common/files/etc/fail2ban/action.d/nftables-allports.local @@ -9,8 +9,8 @@ actionunban = [Init] # With banaction = *-allports there is no need for separate rule names -set_name = fail2ban -blocktype = drop +table = filter +addr_set = fail2ban [Init?family=inet6] -set_name = fail2ban6 +addr_set = fail2ban6 diff --git a/roles/common/files/etc/fail2ban/fail2ban.local b/roles/common/files/etc/fail2ban/fail2ban.local index 53cba35..23a92e9 100644 --- a/roles/common/files/etc/fail2ban/fail2ban.local +++ b/roles/common/files/etc/fail2ban/fail2ban.local @@ -1,16 +1,5 @@ [Definition] -# Option: logtarget -# Notes.: Set the log target. This could be a file, SYSLOG, STDERR or STDOUT. -# Only one log target can be specified. -# If you change logtarget from the default value and you are -# using logrotate -- also adjust or disable rotation in the -# corresponding configuration file -# (e.g. /etc/logrotate.d/fail2ban on Debian systems) -# Values: [ STDOUT | STDERR | SYSLOG | SYSOUT | FILE ] Default: STDERR -# -logtarget = /var/log/fail2ban/fail2ban.log - # Options: dbfile # Notes.: Set the file for the fail2ban persistent data to be stored. # A value of ":memory:" means database is only stored in memory |