Re: [Fail2ban-users] nftables & protocol = all

[Arnaud <ar...@ai...>]

Thanks, you help me to find a way.

It works well by giving an empty value to nftables_mode and :

action = %(banaction_allports)s[name=%(__name__)s-input, chain="input",
actname=%(banaction_allports)s-input]


Arnaud

Le 20/04/2020 à 15:38, Gary Gapinski a écrit :
> On 4/20/20 8:13 AM, Arnaud wrote:
>> I wasn't able to run with nftables and "protocol = all". Sorry in
>> advance if it has been discussed several time.
>> I basically want f2b ban on all port and all protocol.
>
> I have not yet used nftables, but the equivalent allports (and all
> protocols) action appears to be either (depending on fail2ban version)
> action nftables-allports.conf or nftables.conf (see this commit
> <https://github.com/fail2ban/fail2ban/commit/c753ffb11d8ad81c03a89398892b0e1870e8707f#diff-6e277055ba1100ef5bab0e39246ce75f>
> for the latter).
>