Clément Désiles
6355a9aae5
REJECT needs the nft_reject kernel extension, which is unavailable on this Arch kernel (iptables-nft reports 'Extension REJECT revision 0 not supported'), so every ban silently failed. DROP works everywhere and is quieter toward attackers.
9 lines
192 B
Django/Jinja
9 lines
192 B
Django/Jinja
[DEFAULT]
|
|
bantime = 1d
|
|
banaction = {{fail2ban_firewall}}
|
|
allowipv6 = true
|
|
ignoreip = 127.0.0.1/8
|
|
backend = {{fail2ban_backend}}
|
|
blocktype = {{fail2ban_blocktype}}
|
|
ignoreself = true
|