iptables-allports.confを変更する
vi /etc/fail2ban/action.d/iptables-allports.conf
actionstart = <iptables> -N f2b-<name>
<iptables> -A f2b-<name> -j <returntype>
# <iptables> -I <chain> -p <protocol> -j f2b-<name>
<iptables> -I <chain> -j f2b-<name>
# Option: actionstop
# Notes.: command executed at the stop of jail (or at the end of Fail2Ban)
# Values: CMD
#
actionstop = <iptables> -D <chain> -p <protocol> -j f2b-<name>
# <actionflush>
<iptables> -F f2b-<name>
<iptables> -X f2b-<name>
Chain f2b-recidive (3 references)
target prot opt source destination
REJECT all — 45.134.144.128 anywhere reject-with icmp-port-unreachable
REJECT all — srv-141-98-11-6.serveroffer.net anywhere reject-with icmp-port-unreachable
RETURN all — anywhere anywhere
コメント