Re: [Fail2ban-users] BCP to configure actions?

[Christian R. <c...@ro...>]

Am 18.10.2011 17:06, schrieb Yaroslav Halchenko:
> 
> On Tue, 18 Oct 2011, Christian Roessner wrote:
>>>     action_mwla = %(banaction)s[name=%(__name__)s, port="%(port)s", protocol="%(protocol)s", chain="%(chain)s"]
>>>                   %(mta)s-whois-lines[name=%(__name__)s, dest="%(destemail)s", logpath=%(logpath)s, chain="%(chain)s"]
>>>                   x-arf[name=%(__name__)s,template=%(x-arf-template)s,sender=%(x-arf-sender)s,from=%(x-arf-from)]
>>>     x-arf-template=%(__name__)s

Sorry, but to be very honest :-) I do not understand this kind of
configuration. I see a large Python dict-template, but I can not
understand the values. I really try to figure out, which values I get
from where to put it into a database. I started writing the
json-validator, which shall walk through the data, which is read from
the DB. I want to design the table layouts and therefor looked here to
find out, what I really get. But this is very hard.

I think that I will need to tables, one that holds the ban information
that was triggered by an attack, and one table that stores all the log
information that corresponds to exactly one data set from the first
table. It is a 1 to N relation.

Can you help me to find the SQL data atrributes from the fail2ban
action-string? So I could continue coding.

Hope, you don't get me too wrong here ;-) I really am not a fan of a
syntax like the one shown above, as it really requires Python and
internal knowledge from an Administrator. Not a very friendly user
interface (sorry, could not resist in saying that once again).

But thanks anyways for your help.

Best wishes
Christian
-- 
Roessner-Network-Solutions
Bachelor of Science Informatik
50°34.725'N, 08°40.904'O, Nahrungsberg 81, 35390 Giessen
F: +49 641 33055572, M: +49 176 93118939
USt-IdNr.: DE225643613
http://www.roessner-network-solutions.com