Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[RFE]: firewallcmd-ipset Documentation enhancement request #3568

Open
MrPeteH opened this issue Sep 2, 2023 · 2 comments
Open

[RFE]: firewallcmd-ipset Documentation enhancement request #3568

MrPeteH opened this issue Sep 2, 2023 · 2 comments

Comments

@MrPeteH
Copy link

MrPeteH commented Sep 2, 2023

Feature request type

I'm a newbie to this (to some extent) so cautious about where to edit the various documentation files, as well as the examples.
This is a simple request to make clear for noobs exactly what is needed in jail.local to make firewallcmd-ipset work correctly.

Description

There are two keys to editing jail.local to make firewallcmd-ipset work correctly in modern fail2ban:

  1. Near the top:
# use firewallcmd
banaction = firewallcmd-ipset[actiontype=<multiport>]
banaction_allports = firewallcmd-ipset[actiontype=<allports>]
  1. in jail customizations, when you want to use allports:
banaction = %(banaction_allports)s
@sebres
Copy link
Contributor

sebres commented Sep 2, 2023

I'm unsure where exactly in the documentation it belongs.
Here is the source code of man/jail.conf.5.

Another place for that would be the wiki, so don't hesitate to extend it or add new HowTo page.

@MrPeteH
Copy link
Author

MrPeteH commented Sep 2, 2023

Will add it to my ASAP list when I get a few round tuits. :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants