Commit Graph
3 Commits
Author SHA1 Message Date
Clément Désiles 24502f543f fix(fail2ban): pass blocktype via banaction to override the ufw action default
jail-level blocktype is ignored (action [Init] wins); it must be
passed as banaction = ufw[blocktype=deny].
2026-09-05 16:57:45 +02:00
Clément Désiles 6355a9aae5 fix(fail2ban): ban via ufw deny (DROP) instead of reject
REJECT needs the nft_reject kernel extension, which is unavailable on
this Arch kernel (iptables-nft reports 'Extension REJECT revision 0
not supported'), so every ban silently failed. DROP works everywhere
and is quieter toward attackers.
2026-09-05 16:45:12 +02:00
Clément Désiles c612cc7839 chore: first commit 2025-07-25 20:23:54 +02:00