Skip to content

Commit

Permalink
ENH: add action.d/osx-afctl anonymously contributed on f2b wiki
Browse files Browse the repository at this point in the history
  • Loading branch information
grooverdan committed Aug 31, 2013
1 parent 7cc3e8a commit b31799a
Show file tree
Hide file tree
Showing 3 changed files with 24 additions and 0 deletions.
2 changes: 2 additions & 0 deletions ChangeLog
Expand Up @@ -41,6 +41,8 @@ ver. 0.8.11 (2013/XX/XXX) - loves-unittests
closes gh-343.

- New Features:
Anonymous:
* action.d/osx-afctl - an action based on afctl for osx
Daniel Black & ykimon
* filter.d/3proxy.conf -- filter added
Daniel Black
Expand Down
16 changes: 16 additions & 0 deletions config/action.d/osx-afctl.conf
@@ -0,0 +1,16 @@
# Fail2Ban configuration file for using afctl on Mac OS X Server 10.5
#
# Anonymous author
# http://www.fail2ban.org/wiki/index.php?title=HOWTO_Mac_OS_X_Server_(10.5)&diff=prev&oldid=4081
#
# Ref: https://developer.apple.com/library/mac/documentation/Darwin/Reference/ManPages/man8/afctl.8.html

[Definition]
actionstart =
actionstop =
actioncheck =
actionban = /usr/libexec/afctl -a <ip> -t <bantime>
actionunban = /usr/libexec/afctl -r <ip>

[Init]
bantime = 2880

This comment has been minimized.

Copy link
@yarikoptic

yarikoptic Sep 28, 2013

Member

why do we need this custom bantime here?

This comment has been minimized.

Copy link
@yarikoptic

yarikoptic Sep 28, 2013

Member

forget it -- got it ;)

6 changes: 6 additions & 0 deletions config/jail.conf
Expand Up @@ -416,3 +416,9 @@ filter = perdition
action = iptables-multiport[name=perdition,port="110,143,993,995"]
logpath = /var/log/maillog


[osx-ssh-afctl]
enabled = false
filter = sshd
action = osx-afctl[bantime=600]
logpath = /var/log/secure.log

0 comments on commit b31799a

Please sign in to comment.