Gecko [ nrupathungauniversityblr.ac.in ]

Name	Size	Permission
abuseipdb.conf	3.79 KB	-rw-r--r--
apf.conf	587 B	-rw-r--r--
badips.conf	629 B	-rw-r--r--
badips.py	10.66 KB	-rw-r--r--
blocklist_de.conf	2.57 KB	-rw-r--r--
bsd-ipfw.conf	3.02 KB	-rw-r--r--
cloudflare.conf	2.66 KB	-rw-r--r--
complain.conf	4.56 KB	-rw-r--r--
dshield.conf	7.4 KB	-rw-r--r--
dummy.conf	1.59 KB	-rw-r--r--
firewallcmd-allports.conf	1.47 KB	-rw-r--r--
firewallcmd-common.conf	2.59 KB	-rw-r--r--
firewallcmd-ipset.conf	2.18 KB	-rw-r--r--
firewallcmd-multiport.conf	1.24 KB	-rw-r--r--
firewallcmd-new.conf	1.85 KB	-rw-r--r--
firewallcmd-rich-logging.conf	2.26 KB	-rw-r--r--
firewallcmd-rich-rules.conf	1.72 KB	-rw-r--r--
helpers-common.conf	589 B	-rw-r--r--
hostsdeny.conf	1.37 KB	-rw-r--r--
ipfilter.conf	1.45 KB	-rw-r--r--
ipfw.conf	1.38 KB	-rw-r--r--
iptables-allports.conf	1.39 KB	-rw-r--r--
iptables-common.conf	2.67 KB	-rw-r--r--
iptables-ipset-proto4.conf	1.95 KB	-rw-r--r--
iptables-ipset-proto6-allports...	2.15 KB	-rw-r--r--
iptables-ipset-proto6.conf	2.19 KB	-rw-r--r--
iptables-multiport-log.conf	2.03 KB	-rw-r--r--
iptables-multiport.conf	1.39 KB	-rw-r--r--
iptables-new.conf	1.46 KB	-rw-r--r--
iptables-xt_recent-echo.conf	2.52 KB	-rw-r--r--
iptables.conf	1.31 KB	-rw-r--r--
mail-buffered.conf	2.29 KB	-rw-r--r--
mail-whois-common.conf	1.02 KB	-rw-r--r--
mail-whois-lines.conf	2.3 KB	-rw-r--r--
mail-whois.conf	1.71 KB	-rw-r--r--
mail.conf	1.58 KB	-rw-r--r--
mynetwatchman.conf	5.11 KB	-rw-r--r--
netscaler.conf	1.46 KB	-rw-r--r--
nftables-allports.conf	490 B	-rw-r--r--
nftables-common.conf	3.94 KB	-rw-r--r--
nftables-multiport.conf	496 B	-rw-r--r--
nginx-block-map.conf	3.61 KB	-rw-r--r--
npf.conf	1.4 KB	-rw-r--r--
nsupdate.conf	3.07 KB	-rw-r--r--
osx-afctl.conf	469 B	-rw-r--r--
osx-ipfw.conf	2.16 KB	-rw-r--r--
pf.conf	3.58 KB	-rw-r--r--
route.conf	1023 B	-rw-r--r--
sendmail-buffered.conf	2.76 KB	-rw-r--r--
sendmail-common.conf	1.78 KB	-rw-r--r--
sendmail-geoip-lines.conf	1.73 KB	-rw-r--r--
sendmail-whois-ipjailmatches.c...	1.03 KB	-rw-r--r--
sendmail-whois-ipmatches.conf	1.01 KB	-rw-r--r--
sendmail-whois-lines.conf	1.27 KB	-rw-r--r--
sendmail-whois-matches.conf	997 B	-rw-r--r--
sendmail-whois.conf	977 B	-rw-r--r--
sendmail.conf	857 B	-rw-r--r--
shorewall-ipset-proto6.conf	2.91 KB	-rw-r--r--
shorewall.conf	2.02 KB	-rw-r--r--
smtp.py	5.99 KB	-rw-r--r--
symbiosis-blacklist-allports.c...	1.3 KB	-rw-r--r--
ufw.conf	1.02 KB	-rw-r--r--
xarf-login-attack.conf	5.94 KB	-rw-r--r--

Code Editor : pf.conf

# Fail2Ban configuration file
#
# OpenBSD pf ban/unban
#
# Author: Nick Hilliard <nick@foobar.org>
# Modified by: Alexander Koeppe making PF work seamless and with IPv4 and IPv6
#
#

[Definition]

# Option:  actionstart
# Notes.:  command executed once at the start of Fail2Ban.
# Values:  CMD
#
# we don't enable PF automatically; to enable run pfctl -e 
# or add `pf_enable="YES"` to /etc/rc.conf (tested on FreeBSD)
# also, these rulesets are loaded into (nested) anchors
# to enable them, add as wildcard:
#     anchor "f2b/*"
# or using jail names:
#     anchor f2b {
#        anchor name1
#        anchor name2
#        ...
#     }
# to your main pf ruleset, where "namei" are the names of the jails
# which invoke this action
actionstart = echo "table <<tablename>-<name>> persist counters" | <pfctl> -f-
              port="<port>"; if [ "$port" != "" ] && case "$port" in \{*) false;; esac; then port="{$port}"; fi
              echo "<block> proto <protocol> from <<tablename>-<name>> to <actiontype>" | <pfctl> -f-

# Option:  start_on_demand - to start action on demand
# Example: `action=pf[actionstart_on_demand=true]`
actionstart_on_demand = false

# Option:  actionstop
# Notes.:  command executed once at the end of Fail2Ban
# Values:  CMD
#
# we only disable PF rules we've installed prior
actionstop = <pfctl> -sr 2>/dev/null | grep -v <tablename>-<name> | <pfctl> -f-
             %(actionflush)s
             <pfctl> -t <tablename>-<name> -T kill

# Option:  actionflush
# Notes.:  command executed once to flush IPS, by shutdown (resp. by stop of the jail or this action)
# Values:  CMD
#
actionflush = <pfctl> -t <tablename>-<name> -T flush

# Option:  actioncheck
# Notes.:  command executed once before each actionban command
# Values:  CMD
#
actioncheck = <pfctl> -sr | grep -q <tablename>-<name>

# Option:  actionban
# Notes.:  command executed when banning an IP. Take care that the
#          command is executed with Fail2Ban user rights.
# Tags:    <ip>  IP address
#          <failures>  number of failures
#          <time>  unix timestamp of the ban time
# Values:  CMD
#
actionban = <pfctl> -t <tablename>-<name> -T add <ip>

# Option:  actionunban
# Notes.:  command executed when unbanning an IP. Take care that the
#          command is executed with Fail2Ban user rights.
# Tags:    <ip>  IP address
#          <failures>  number of failures
#          <time>  unix timestamp of the ban time
# Values:  CMD
#
# note -r option used to remove matching rule
actionunban = <pfctl> -t <tablename>-<name> -T delete <ip>

# Option: pfctl
#
# Use anchor as jailname to manipulate affected rulesets only.
# If more parameter expected it can be extended with `pf[pfctl="<known/pfctl> ..."]`
# 
pfctl = pfctl -a f2b/<name>

[Init]
# Option:  tablename
# Notes.:  The pf table name.
# Values:  [ STRING ]
#
tablename = f2b

# Option: block
#
# The action you want pf to take.
# Probably, you want "block quick", but adjust as needed.
block = block quick

# Option:  protocol
# Notes.:  internally used by config reader for interpolations.
# Values:  [ tcp | udp | icmp | ipv6-icmp ] Default: tcp
#
protocol = tcp

# Option: actiontype
# Notes.: defines additions to the blocking rule
# Values: leave empty to block all attempts from the host
# Default: Value of the multiport
actiontype = <multiport>

# Option: allports
# Notes.: default addition to block all ports
# Usage.: use in jail config: "banaction = pf[actiontype=<allports>]"
allports = any

# Option: multiport
# Notes.: addition to block access only to specific ports
# Usage.: use in jail config: "banaction = pf[actiontype=<multiport>]"
multiport = any port $port

${this.title}

Code Editor : pf.conf