Gecko [ nrupathungauniversityblr.ac.in ]

Name	Size	Permission
abuseipdb.conf	3.79 KB	-rw-r--r--
apf.conf	587 B	-rw-r--r--
badips.conf	629 B	-rw-r--r--
badips.py	10.66 KB	-rw-r--r--
blocklist_de.conf	2.57 KB	-rw-r--r--
bsd-ipfw.conf	3.02 KB	-rw-r--r--
cloudflare.conf	2.66 KB	-rw-r--r--
complain.conf	4.56 KB	-rw-r--r--
dshield.conf	7.4 KB	-rw-r--r--
dummy.conf	1.59 KB	-rw-r--r--
firewallcmd-allports.conf	1.47 KB	-rw-r--r--
firewallcmd-common.conf	2.59 KB	-rw-r--r--
firewallcmd-ipset.conf	2.18 KB	-rw-r--r--
firewallcmd-multiport.conf	1.24 KB	-rw-r--r--
firewallcmd-new.conf	1.85 KB	-rw-r--r--
firewallcmd-rich-logging.conf	2.26 KB	-rw-r--r--
firewallcmd-rich-rules.conf	1.72 KB	-rw-r--r--
helpers-common.conf	589 B	-rw-r--r--
hostsdeny.conf	1.37 KB	-rw-r--r--
ipfilter.conf	1.45 KB	-rw-r--r--
ipfw.conf	1.38 KB	-rw-r--r--
iptables-allports.conf	1.39 KB	-rw-r--r--
iptables-common.conf	2.67 KB	-rw-r--r--
iptables-ipset-proto4.conf	1.95 KB	-rw-r--r--
iptables-ipset-proto6-allports...	2.15 KB	-rw-r--r--
iptables-ipset-proto6.conf	2.19 KB	-rw-r--r--
iptables-multiport-log.conf	2.03 KB	-rw-r--r--
iptables-multiport.conf	1.39 KB	-rw-r--r--
iptables-new.conf	1.46 KB	-rw-r--r--
iptables-xt_recent-echo.conf	2.52 KB	-rw-r--r--
iptables.conf	1.31 KB	-rw-r--r--
mail-buffered.conf	2.29 KB	-rw-r--r--
mail-whois-common.conf	1.02 KB	-rw-r--r--
mail-whois-lines.conf	2.3 KB	-rw-r--r--
mail-whois.conf	1.71 KB	-rw-r--r--
mail.conf	1.58 KB	-rw-r--r--
mynetwatchman.conf	5.11 KB	-rw-r--r--
netscaler.conf	1.46 KB	-rw-r--r--
nftables-allports.conf	490 B	-rw-r--r--
nftables-common.conf	3.94 KB	-rw-r--r--
nftables-multiport.conf	496 B	-rw-r--r--
nginx-block-map.conf	3.61 KB	-rw-r--r--
npf.conf	1.4 KB	-rw-r--r--
nsupdate.conf	3.07 KB	-rw-r--r--
osx-afctl.conf	469 B	-rw-r--r--
osx-ipfw.conf	2.16 KB	-rw-r--r--
pf.conf	3.58 KB	-rw-r--r--
route.conf	1023 B	-rw-r--r--
sendmail-buffered.conf	2.76 KB	-rw-r--r--
sendmail-common.conf	1.78 KB	-rw-r--r--
sendmail-geoip-lines.conf	1.73 KB	-rw-r--r--
sendmail-whois-ipjailmatches.c...	1.03 KB	-rw-r--r--
sendmail-whois-ipmatches.conf	1.01 KB	-rw-r--r--
sendmail-whois-lines.conf	1.27 KB	-rw-r--r--
sendmail-whois-matches.conf	997 B	-rw-r--r--
sendmail-whois.conf	977 B	-rw-r--r--
sendmail.conf	857 B	-rw-r--r--
shorewall-ipset-proto6.conf	2.91 KB	-rw-r--r--
shorewall.conf	2.02 KB	-rw-r--r--
smtp.py	5.99 KB	-rw-r--r--
symbiosis-blacklist-allports.c...	1.3 KB	-rw-r--r--
ufw.conf	1.02 KB	-rw-r--r--
xarf-login-attack.conf	5.94 KB	-rw-r--r--

Code Editor : nftables-common.conf

# Fail2Ban configuration file
#
# Author: Daniel Black
# Author: Cyril Jaquier
# Modified: Yaroslav O. Halchenko <debian@onerussian.com>
# 			made active on all ports from original iptables.conf
# Modified: Alexander Belykh <albel727@ngs.ru>
#                       adapted for nftables
#
# This is a included configuration file and includes the definitions for the nftables
# used in all nftables based actions by default.
#
# The user can override the defaults in nftables-common.local

[INCLUDES]

after = nftables-common.local

[Definition]

# Option:  nftables_mode
# Notes.:  additional expressions for nftables filter rule
# Values:  nftables expressions
#
nftables_mode = <protocol> dport \{ <port> \}

# Option:  actionstart
# Notes.:  command executed once at the start of Fail2Ban.
# Values:  CMD
#
actionstart = <nftables> add set <nftables_family> <nftables_table> <set_name> \{ type <nftables_type>\; \}
              <nftables> insert rule <nftables_family> <nftables_table> <chain> %(nftables_mode)s <address_family> saddr @<set_name> <blocktype>

_nft_list = <nftables> --handle --numeric list chain <nftables_family> <nftables_table> <chain>
_nft_get_handle_id = grep -m1 '<address_family> saddr @<set_name> <blocktype> # handle' | grep -oe ' handle [0-9]*'

# Option:  actionstop
# Notes.:  command executed once at the end of Fail2Ban
# Values:  CMD
#
actionstop = HANDLE_ID=$(%(_nft_list)s | %(_nft_get_handle_id)s)
             <nftables> delete rule <nftables_family> <nftables_table> <chain> $HANDLE_ID
             <nftables> delete set <nftables_family> <nftables_table> <set_name>

# Option:  actioncheck
# Notes.:  command executed once before each actionban command
# Values:  CMD
#
actioncheck = <nftables> list chain <nftables_family> <nftables_table> <chain> | grep -q '@<set_name>[ \t]'

# Option:  actionban
# Notes.:  command executed when banning an IP. Take care that the
#          command is executed with Fail2Ban user rights.
# Tags:    See jail.conf(5) man page
# Values:  CMD
#
actionban = <nftables> add element <nftables_family> <nftables_table> <set_name> \{ <ip> \}

# Option:  actionunban
# Notes.:  command executed when unbanning an IP. Take care that the
#          command is executed with Fail2Ban user rights.
# Tags:    See jail.conf(5) man page
# Values:  CMD
#
actionunban = <nftables> delete element <nftables_family> <nftables_table> <set_name> \{ <ip> \}

[Init]

# Option:  nftables_type
# Notes.:  address type to work with
# Values:  [ipv4_addr | ipv6_addr]  Default: ipv4_addr
#
nftables_type = ipv4_addr

# Option:  nftables_family
# Notes.:  address family to work in
# Values:  [ip | ip6 | inet]  Default: inet
#
nftables_family = inet

# Option:  nftables_table
# Notes.:  table in the address family to work in
# Values:  STRING  Default: filter
#
nftables_table = filter

# Option:  chain
# Notes    specifies the nftables chain to which the Fail2Ban rules should be
#          added
# Values:  STRING  Default: input
chain = input

# Default name of the filtering set
#
name = default

# Option:  port
# Notes.:  specifies port to monitor
# Values:  [ NUM | STRING ]  Default:
#
port = ssh

# Option:  protocol
# Notes.:  internally used by config reader for interpolations.
# Values:  [ tcp | udp ] Default: tcp
#
protocol = tcp

# Option:  blocktype
# Note:    This is what the action does with rules. This can be any jump target
#          as per the nftables man page (section 8). Common values are drop
#          reject, reject with icmp type host-unreachable
# Values:  STRING
blocktype = reject

# Option:  nftables
# Notes.:  Actual command to be executed, including common to all calls options
# Values:  STRING
nftables = nft

# Option: set_name
# Notes.: The name of the nft set used to store banned addresses
# Values: STRING
set_name = f2b-<name>

# Option: address_family
# Notes.: The family of the banned addresses
# Values: [ ip | ip6 ]
address_family = ip

[Init?family=inet6]

nftables_type = ipv6_addr
set_name = f2b-<name>6
address_family = ip6

${this.title}

Code Editor : nftables-common.conf