Clément Désiles
6355a9aae5
REJECT needs the nft_reject kernel extension, which is unavailable on this Arch kernel (iptables-nft reports 'Extension REJECT revision 0 not supported'), so every ban silently failed. DROP works everywhere and is quieter toward attackers.
5 lines
78 B
YAML
5 lines
78 B
YAML
---
|
|
fail2ban_firewall: ufw
|
|
fail2ban_backend: systemd
|
|
fail2ban_blocktype: deny
|