summaryrefslogtreecommitdiff
path: root/config/action.d/iptables-new.conf
diff options
context:
space:
mode:
authorDaniel Black <grooverdan@users.sourceforge.net>2013-05-08 07:52:08 +1000
committerDaniel Black <grooverdan@users.sourceforge.net>2013-05-08 07:52:08 +1000
commit9c03ee6d9ebc31bb1d00be8c747379c06cfde278 (patch)
treeaa715b0ade6abbc845c7b66cfe4616b59dc4de5f /config/action.d/iptables-new.conf
parentc7fd7779664dda7247840485277315193f999102 (diff)
downloadfail2ban-9c03ee6d9ebc31bb1d00be8c747379c06cfde278.tar.gz
ENH: consolidate where blocktype is defined for iptables rules
Diffstat (limited to 'config/action.d/iptables-new.conf')
-rw-r--r--config/action.d/iptables-new.conf12
1 files changed, 5 insertions, 7 deletions
diff --git a/config/action.d/iptables-new.conf b/config/action.d/iptables-new.conf
index f5467ee2..c8664a22 100644
--- a/config/action.d/iptables-new.conf
+++ b/config/action.d/iptables-new.conf
@@ -7,6 +7,11 @@
# $Revision$
#
+[INCLUDES]
+
+before = iptables-blocktype.conf
+
+
[Definition]
# Option: actionstart
@@ -70,10 +75,3 @@ protocol = tcp
# added
# Values: STRING Default: INPUT
chain = INPUT
-
-# Option: blocktype
-# Note: This is what the action does with rules. This can be any jump target
-# as per the iptables man page (section 8). Common values are DROP
-# REJECT, REJECT --reject-with icmp-port-unreachable
-# Values: STRING
-blocktype = REJECT --reject-with icmp-port-unreachable