Switch branches/tags
upstream/0.8.4 upstream/0.8.3 upstream/0.8.2 upstream/0.8.1 upstream/0.8.0 upstream/0.7.9 upstream/0.7.8 upstream/0.7.7 upstream/0.7.6 upstream/0.7.5 upstream/0.7.4 upstream/0.6.1 upstream/0.6.0 upstream/0.5.4 upstream/0.5.3 upstream/0.5.2 sdist/0.8.5 sdist/0.8.4 sdist/0.8.4+svn20110323 sdist/0.8.3 sdist/0.8.2 sdist/0.8.1 sdist/0.8.0 sdist/0.7.9 sdist/0.7.8 sdist/0.7.7 sdist/0.7.6 sdist/0.7.5 sdist/0.7.4 sdist/0.6.1 sdist/0.6.0 sdist/0.5.4 sdist/0.5.3 sdist/0.5.2 fail2ban_0.9.X debian/0.10.2-1 debian/0.9.7-2 debian/0.9.7-1 debian/0.9.6-2 debian/0.9.6-1 debian/0.9.5-1 debian/0.9.4-1 debian/0.9.3-1 debian/0.9.2-1 debian/0.9.1+git44-gd65c4f8-1 debian/0.9.1-1 debian/0.9.0+git252-g47441d1-1 debian/0.9.0+git48-gabcab00-1 debian/0.9.0+git37-gdeb5924-1 debian/0.9.X-python3 debian/0.8.13-1 debian/0.8.11_pre1+git29-gccd2657-1 debian/0.8.11-1 debian/0.8.10-3 debian/0.8.10-1 debian/0.8.9-1 debian/0.8.8-1 debian/0.8.8-1+lucid0 debian/0.8.7-1 debian/0.8.6_+git69-gb4099da-1 debian/0.8.6-3 debian/0.8.6-3wheezy3 debian/0.8.6-3wheezy2 debian/0.8.6-3wheezy1 debian/0.8.6-2 debian/0.8.6-1 debian/0.8.5-2 debian/0.8.5-1 debian/0.8.4+svn20110323-1 debian/0.8.4-3 debian/0.8.4-3+squeeze3 debian/0.8.4-3+squeeze2 debian/0.8.4-3+squeeze1 debian/0.8.4-2 debian/0.8.4-1 debian/0.8.3-6 debian/0.8.3-5 debian/0.8.3-4 debian/0.8.3-3 debian/0.8.3-2 debian/0.8.3-2sid1 debian/0.8.3-1 debian/0.8.2-3 debian/0.8.2-2 debian/0.8.2-1 debian/0.8.1-5 debian/0.8.1-4 debian/0.8.1-3 debian/0.8.1-2 debian/0.8.1-1 debian/0.8.0-2 debian/0.8.0-1 debian/0.7.9-1 debian/0.7.8-1 debian/0.7.7-1 debian/0.7.6-3 debian/0.7.6-1 debian/0.7.5-3+pre6 debian/0.7.5-2 debian/0.7.5-2full
Nothing to show
Find file Copy path
Fetching contributors…
Cannot retrieve contributors at this time
68 lines (57 sloc) 2.23 KB
# Fail2Ban configuration file
# Author: Zbigniew Jędrzejewski-Szmek <>
before = iptables-common.conf
# Option: actionstart
# Notes.: command executed once at the start of Fail2Ban.
# Values: CMD
# Changing iptables rules requires root privileges. If fail2ban is
# configured to run as root, firewall setup can be performed by
# fail2ban automatically. However, if fail2ban is configured to run as
# a normal user, the configuration must be done by some other means
# (e.g. using static firewall configuration with the
# iptables-persistent package).
# Explanation of the rule below:
# Check if any packets coming from an IP on the f2b-<name>
# list have been seen in the last 3600 seconds. If yes, update the
# timestamp for this IP and drop the packet. If not, let the packet
# through.
# Fail2ban inserts blacklisted hosts into the f2b-<name> list
# and removes them from the list after some time, according to its
# own rules. The 3600 second timeout is independent and acts as a
# safeguard in case the fail2ban process dies unexpectedly. The
# shorter of the two timeouts actually matters.
actionstart = if [ `id -u` -eq 0 ];then <iptables> -I <chain> -m recent --update --seconds 3600 --name f2b-<name> -j <blocktype>;fi
# Option: actionstop
# Notes.: command executed once at the end of Fail2Ban
# Values: CMD
actionstop = echo / > /proc/net/xt_recent/f2b-<name>
if [ `id -u` -eq 0 ];then <iptables> -D <chain> -m recent --update --seconds 3600 --name f2b-<name> -j <blocktype>;fi
# Option: actioncheck
# Notes.: command executed once before each actionban command
# Values: CMD
actioncheck = test -e /proc/net/xt_recent/f2b-<name>
# Option: actionban
# Notes.: command executed when banning an IP. Take care that the
# command is executed with Fail2Ban user rights.
# Tags: See jail.conf(5) man page
# Values: CMD
actionban = echo +<ip> > /proc/net/xt_recent/f2b-<name>
# Option: actionunban
# Notes.: command executed when unbanning an IP. Take care that the
# command is executed with Fail2Ban user rights.
# Tags: See jail.conf(5) man page
# Values: CMD
actionunban = echo -<ip> > /proc/net/xt_recent/f2b-<name>