Mercurial > repos > other > Puppet
view modules/fail2ban/files/ibb-apache-ip-block.conf @ 341:3a1b19f6a054
Add a "repeat offender" ban to Apache IP block
We can now have multiple lists (currently hardcoded at two)
so that expiring the instaban doesn't remove the longer
repeat offence ban
author | IBBoard <dev@ibboard.co.uk> |
---|---|
date | Wed, 27 May 2020 19:00:28 +0100 |
parents | a79ad974a548 |
children |
line wrap: on
line source
# Custom IP blocking script for Apache # This deals with IPv4 and IPv6 on an IPv6-only server # with PROXY protocol support so we can see the originating # IPv4 address [Init] # Blank chain by default chain = [Definition] actionstart = actionstop = actioncheck = actionban = /usr/local/bin/apache-ip-ban ban <ip> <chain> actionunban = /usr/local/bin/apache-ip-ban unban <ip> <chain>