ports/security/py-fail2ban/files/patch-pf.conf
Wesley Shields 68a7ee0efc - Include configuration file for pf.
- Add patch for supporting syslogd -v or -vv.

PR:		ports/157318
Submitted by:	Nick Hilliard <nick@foobar.org>
Approved by:	maintainer timeout
2011-06-11 02:08:40 +00:00

59 lines
1.5 KiB
Text

--- /dev/null 2010-01-12 16:33:00.000000000 -0500
+++ ./config/action.d/pf.conf 2010-01-12 16:26:51.000000000 -0500
@@ -0,0 +1,56 @@
+# Fail2Ban configuration file
+#
+# OpenBSD pf ban/unban
+#
+# Author: Nick Hilliard <nick@foobar.org>
+#
+#
+
+[Definition]
+
+# Option: actionstart
+# Notes.: command executed once at the start of Fail2Ban.
+# Values: CMD
+#
+# we don't enable PF automatically, as it will be enabled elsewhere
+actionstart =
+
+
+# Option: actionstop
+# Notes.: command executed once at the end of Fail2Ban
+# Values: CMD
+#
+# we don't disable PF automatically either
+actionstop =
+
+
+# Option: actioncheck
+# Notes.: command executed once before each actionban command
+# Values: CMD
+#
+actioncheck =
+
+
+# Option: actionban
+# Notes.: command executed when banning an IP. Take care that the
+# command is executed with Fail2Ban user rights.
+# Tags: <ip> IP address
+# <failures> number of failures
+# <time> unix timestamp of the ban time
+# Values: CMD
+#
+actionban = /sbin/pfctl -t fail2ban -T add <ip>/32
+
+
+# Option: actionunban
+# Notes.: command executed when unbanning an IP. Take care that the
+# command is executed with Fail2Ban user rights.
+# Tags: <ip> IP address
+# <failures> number of failures
+# <time> unix timestamp of the ban time
+# Values: CMD
+#
+# note -r option used to remove matching rule
+actionunban = /sbin/pfctl -t fail2ban -T delete <ip>/32
+
+[Init]