Menu
▾
▴
[Fail2ban-commit] SF.net SVN: fail2ban: [494] trunk/config
|
From: <los...@us...> - 2006-12-18 22:33:10
|
Revision: 494
http://svn.sourceforge.net/fail2ban/?rev=494&view=rev
Author: lostcontrol
Date: 2006-12-18 14:33:01 -0800 (Mon, 18 Dec 2006)
Log Message:
-----------
- Fixed some comments
Modified Paths:
--------------
trunk/config/action.d/dummy.conf
trunk/config/action.d/hostsdeny.conf
trunk/config/action.d/ipfw.conf
trunk/config/action.d/iptables.conf
trunk/config/action.d/mail-whois.conf
trunk/config/action.d/mail.conf
trunk/config/action.d/shorewall.conf
trunk/config/fail2ban.conf
trunk/config/jail.conf
Modified: trunk/config/action.d/dummy.conf
===================================================================
--- trunk/config/action.d/dummy.conf 2006-12-18 22:30:30 UTC (rev 493)
+++ trunk/config/action.d/dummy.conf 2006-12-18 22:33:01 UTC (rev 494)
@@ -7,26 +7,26 @@
[Definition]
-# Option: fwstart
+# Option: actionstart
# Notes.: command executed once at the start of Fail2Ban.
# Values: CMD
#
actionstart = touch /tmp/fail2ban.dummy
echo "<init>" >> /tmp/fail2ban.dummy
-# Option: fwend
+# Option: actionend
# Notes.: command executed once at the end of Fail2Ban
# Values: CMD
#
actionstop = rm -f /tmp/fail2ban.dummy
-# Option: fwcheck
-# Notes.: command executed once before each fwban command
+# Option: actioncheck
+# Notes.: command executed once before each actionban command
# Values: CMD
#
actioncheck =
-# Option: fwban
+# Option: actionban
# Notes.: command executed when banning an IP. Take care that the
# command is executed with Fail2Ban user rights.
# Tags: <ip> IP address
@@ -36,7 +36,7 @@
#
actionban = echo "+<ip>" >> /tmp/fail2ban.dummy
-# Option: fwunban
+# Option: actionunban
# Notes.: command executed when unbanning an IP. Take care that the
# command is executed with Fail2Ban user rights.
# Tags: <ip> IP address
Modified: trunk/config/action.d/hostsdeny.conf
===================================================================
--- trunk/config/action.d/hostsdeny.conf 2006-12-18 22:30:30 UTC (rev 493)
+++ trunk/config/action.d/hostsdeny.conf 2006-12-18 22:33:01 UTC (rev 494)
@@ -7,25 +7,25 @@
[Definition]
-# Option: fwstart
+# Option: actionstart
# Notes.: command executed once at the start of Fail2Ban.
# Values: CMD
#
actionstart = touch <tmpfile>
-# Option: fwend
+# Option: actionend
# Notes.: command executed once at the end of Fail2Ban
# Values: CMD
#
actionstop = rm -f <tmpfile>
-# Option: fwcheck
-# Notes.: command executed once before each fwban command
+# Option: actioncheck
+# Notes.: command executed once before each actionban command
# Values: CMD
#
actioncheck =
-# Option: fwban
+# Option: actionban
# Notes.: command executed when banning an IP. Take care that the
# command is executed with Fail2Ban user rights.
# Tags: <ip> IP address
@@ -36,7 +36,7 @@
actionban = IP=<ip> &&
echo "ALL: $IP" >> <file>
-# Option: fwunban
+# Option: actionunban
# Notes.: command executed when unbanning an IP. Take care that the
# command is executed with Fail2Ban user rights.
# Tags: <ip> IP address
Modified: trunk/config/action.d/ipfw.conf
===================================================================
--- trunk/config/action.d/ipfw.conf 2006-12-18 22:30:30 UTC (rev 493)
+++ trunk/config/action.d/ipfw.conf 2006-12-18 22:33:01 UTC (rev 494)
@@ -8,28 +8,28 @@
[Definition]
-# Option: fwstart
+# Option: actionstart
# Notes.: command executed once at the start of Fail2Ban.
# Values: CMD
#
actionstart =
-# Option: fwend
+# Option: actionend
# Notes.: command executed once at the end of Fail2Ban
# Values: CMD
#
actionstop =
-# Option: fwcheck
-# Notes.: command executed once before each fwban command
+# Option: actioncheck
+# Notes.: command executed once before each actionban command
# Values: CMD
#
actioncheck =
-# Option: fwban
+# Option: actionban
# Notes.: command executed when banning an IP. Take care that the
# command is executed with Fail2Ban user rights.
# Tags: <ip> IP address
@@ -37,10 +37,10 @@
# <time> unix timestamp of the ban time
# Values: CMD
#
-actionban = ipfw add deny tcp from <ip> to <localhost> <port>
+actionban = ipaction add deny tcp from <ip> to <localhost> <port>
-# Option: fwunban
+# Option: actionunban
# Notes.: command executed when unbanning an IP. Take care that the
# command is executed with Fail2Ban user rights.
# Tags: <ip> IP address
@@ -48,7 +48,7 @@
# <time> unix timestamp of the ban time
# Values: CMD
#
-actionunban = ipfw delete `ipfw list | grep -i <ip> | awk '{print $1;}'`
+actionunban = ipaction delete `ipfw list | grep -i <ip> | awk '{print $1;}'`
[Init]
Modified: trunk/config/action.d/iptables.conf
===================================================================
--- trunk/config/action.d/iptables.conf 2006-12-18 22:30:30 UTC (rev 493)
+++ trunk/config/action.d/iptables.conf 2006-12-18 22:33:01 UTC (rev 494)
@@ -7,7 +7,7 @@
[Definition]
-# Option: fwstart
+# Option: actionstart
# Notes.: command executed once at the start of Fail2Ban.
# Values: CMD
#
@@ -15,7 +15,7 @@
iptables -A fail2ban-<name> -j RETURN
iptables -I INPUT -p <protocol> --dport <port> -j fail2ban-<name>
-# Option: fwend
+# Option: actionend
# Notes.: command executed once at the end of Fail2Ban
# Values: CMD
#
@@ -23,13 +23,13 @@
iptables -F fail2ban-<name>
iptables -X fail2ban-<name>
-# Option: fwcheck
-# Notes.: command executed once before each fwban command
+# Option: actioncheck
+# Notes.: command executed once before each actionban command
# Values: CMD
#
actioncheck = iptables -n -L INPUT | grep -q fail2ban-<name>
-# Option: fwban
+# Option: actionban
# Notes.: command executed when banning an IP. Take care that the
# command is executed with Fail2Ban user rights.
# Tags: <ip> IP address
@@ -39,7 +39,7 @@
#
actionban = iptables -I fail2ban-<name> 1 -s <ip> -j DROP
-# Option: fwunban
+# Option: actionunban
# Notes.: command executed when unbanning an IP. Take care that the
# command is executed with Fail2Ban user rights.
# Tags: <ip> IP address
Modified: trunk/config/action.d/mail-whois.conf
===================================================================
--- trunk/config/action.d/mail-whois.conf 2006-12-18 22:30:30 UTC (rev 493)
+++ trunk/config/action.d/mail-whois.conf 2006-12-18 22:33:01 UTC (rev 494)
@@ -7,7 +7,7 @@
[Definition]
-# Option: fwstart
+# Option: actionstart
# Notes.: command executed once at the start of Fail2Ban.
# Values: CMD
#
@@ -16,7 +16,7 @@
Regards,\n
Fail2Ban"|mail -s "[Fail2Ban] <name>: started" <dest>
-# Option: fwend
+# Option: actionend
# Notes.: command executed once at the end of Fail2Ban
# Values: CMD
#
@@ -25,13 +25,13 @@
Regards,\n
Fail2Ban"|mail -s "[Fail2Ban] <name>: stopped" <dest>
-# Option: fwcheck
-# Notes.: command executed once before each fwban command
+# Option: actioncheck
+# Notes.: command executed once before each actionban command
# Values: CMD
#
actioncheck =
-# Option: fwban
+# Option: actionban
# Notes.: command executed when banning an IP. Take care that the
# command is executed with Fail2Ban user rights.
# Tags: <ip> IP address
@@ -47,7 +47,7 @@
Regards,\n
Fail2Ban"|mail -s "[Fail2Ban] <name>: banned <ip>" <dest>
-# Option: fwunban
+# Option: actionunban
# Notes.: command executed when unbanning an IP. Take care that the
# command is executed with Fail2Ban user rights.
# Tags: <ip> IP address
Modified: trunk/config/action.d/mail.conf
===================================================================
--- trunk/config/action.d/mail.conf 2006-12-18 22:30:30 UTC (rev 493)
+++ trunk/config/action.d/mail.conf 2006-12-18 22:33:01 UTC (rev 494)
@@ -7,7 +7,7 @@
[Definition]
-# Option: fwstart
+# Option: actionstart
# Notes.: command executed once at the start of Fail2Ban.
# Values: CMD
#
@@ -16,7 +16,7 @@
Regards,\n
Fail2Ban"|mail -s "[Fail2Ban] <name>: started" <dest>
-# Option: fwend
+# Option: actionend
# Notes.: command executed once at the end of Fail2Ban
# Values: CMD
#
@@ -25,13 +25,13 @@
Regards,\n
Fail2Ban"|mail -s "[Fail2Ban] <name>: stopped" <dest>
-# Option: fwcheck
-# Notes.: command executed once before each fwban command
+# Option: actioncheck
+# Notes.: command executed once before each actionban command
# Values: CMD
#
actioncheck =
-# Option: fwban
+# Option: actionban
# Notes.: command executed when banning an IP. Take care that the
# command is executed with Fail2Ban user rights.
# Tags: <ip> IP address
@@ -45,7 +45,7 @@
Regards,\n
Fail2Ban"|mail -s "[Fail2Ban] <name>: banned <ip>" <dest>
-# Option: fwunban
+# Option: actionunban
# Notes.: command executed when unbanning an IP. Take care that the
# command is executed with Fail2Ban user rights.
# Tags: <ip> IP address
Modified: trunk/config/action.d/shorewall.conf
===================================================================
--- trunk/config/action.d/shorewall.conf 2006-12-18 22:30:30 UTC (rev 493)
+++ trunk/config/action.d/shorewall.conf 2006-12-18 22:33:01 UTC (rev 494)
@@ -7,25 +7,25 @@
[Definition]
-# Option: fwstart
+# Option: actionstart
# Notes.: command executed once at the start of Fail2Ban.
# Values: CMD
#
actionstart =
-# Option: fwend
+# Option: actionend
# Notes.: command executed once at the end of Fail2Ban
# Values: CMD
#
actionstop =
-# Option: fwcheck
-# Notes.: command executed once before each fwban command
+# Option: actioncheck
+# Notes.: command executed once before each actionban command
# Values: CMD
#
actioncheck =
-# Option: fwban
+# Option: actionban
# Notes.: command executed when banning an IP. Take care that the
# command is executed with Fail2Ban user rights.
# Tags: <ip> IP address
@@ -35,7 +35,7 @@
#
actionban = shorewall reject <ip>
-# Option: fwunban
+# Option: actionunban
# Notes.: command executed when unbanning an IP. Take care that the
# command is executed with Fail2Ban user rights.
# Tags: <ip> IP address
Modified: trunk/config/fail2ban.conf
===================================================================
--- trunk/config/fail2ban.conf 2006-12-18 22:30:30 UTC (rev 493)
+++ trunk/config/fail2ban.conf 2006-12-18 22:33:01 UTC (rev 494)
@@ -25,8 +25,9 @@
logtarget = /var/log/fail2ban.log
# Option: socket
-# Notes.: Set the socket file. This is used to communication with the
-# daemon.
+# Notes.: Set the socket file. This is used to communicate with the daemon. Do
+# not remove this file when Fail2ban runs. It will not be possible to
+# communicate with the server afterwards.
# Values: FILE Default: /tmp/fail2ban.sock
#
socket = /tmp/fail2ban.sock
Modified: trunk/config/jail.conf
===================================================================
--- trunk/config/jail.conf 2006-12-18 22:30:30 UTC (rev 493)
+++ trunk/config/jail.conf 2006-12-18 22:33:01 UTC (rev 494)
@@ -10,18 +10,29 @@
[DEFAULT]
-# "ignoreip" can be an IP address, a CIDR mask or a DNS host.
+# "ignoreip" can be an IP address, a CIDR mask or a DNS host. Fail2ban will not
+# ban a host which matches an address in this list. Several addresses can be
+# defined using space separator.
ignoreip = 127.0.0.1
+
# "bantime" is the number of seconds that a host is banned.
bantime = 600
-# A host is banned if it has generated "maxretry" during the
-# last "findtime" seconds.
+
+# A host is banned if it has generated "maxretry" during the last "findtime"
+# seconds.
findtime = 600
+
# "maxretry" is the number of failures before a host get banned.
maxretry = 3
# "backend" specifies the backend used to get files modification. Available
-# options are "gamin", "polling" and "auto".
+# options are "gamin", "polling" and "auto". This option can be overridden in
+# each jail too (use "gamin" for a jail and "polling" for another).
+#
+# gamin: requires Gamin (a file alteration monitor) to be installed. If Gamin
+# is not installed, Fail2ban will use polling.
+# polling: uses a polling algorithm which does not require external libraries.
+# auto: will choose Gamin if available and polling otherwise.
backend = auto
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|