diff options
| author | Daniel Black <grooverdan@users.sourceforge.net> | 2013-05-05 15:43:18 +1000 |
|---|---|---|
| committer | Daniel Black <grooverdan@users.sourceforge.net> | 2013-05-05 15:43:18 +1000 |
| commit | 3b4a7b7926234fce415372d3d5b1d5ba43e5c4a5 (patch) | |
| tree | 6c756b4fbdce6c45101dc24f6f4028f0e4f971f7 /config/action.d/shorewall.conf | |
| parent | 617fe6cb02d387c9eabe22267794c4eb7b3147f9 (diff) | |
| download | fail2ban-3b4a7b7926234fce415372d3d5b1d5ba43e5c4a5.tar.gz | |
ENH: add blocktype to all relevant actions. Also default the rejection to a ICMP reject rather than a drop
Diffstat (limited to 'config/action.d/shorewall.conf')
| -rw-r--r-- | config/action.d/shorewall.conf | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/config/action.d/shorewall.conf b/config/action.d/shorewall.conf index aca3a256..7e0cee25 100644 --- a/config/action.d/shorewall.conf +++ b/config/action.d/shorewall.conf @@ -39,7 +39,7 @@ actioncheck = # Tags: See jail.conf(5) man page # Values: CMD # -actionban = shorewall drop <ip> +actionban = shorewall <blocktype> <ip> # Option: actionunban # Notes.: command executed when unbanning an IP. Take care that the @@ -48,3 +48,9 @@ actionban = shorewall drop <ip> # Values: CMD # actionunban = shorewall allow <ip> + +# Option: blocktype +# Note: This is what the action does with rules. +# See man page of shorewall for options that include drop, logdrop, reject, or logreject +# Values: STRING +blocktype = reject |