summaryrefslogtreecommitdiffstats
path: root/roles/common/files/etc/fail2ban/action.d/nftables-allports.local
blob: 3c8c0302531920e6791e676ccaa003b6c3078d25 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
[Definition]
# No need to create sets and rules, these are defined globally in nftables.conf
actionstart =
actionstop =
actioncheck =

# unbanning is taken care of by setting a timeout on the nft set already
actionunban =

[Init]
# With banaction = *-allports there is no need for separate rule names
set_name = fail2ban
blocktype = drop

[Init?family=inet6]
set_name = fail2ban6