This commit is contained in:
Marvin Zurborg 2025-08-19 00:58:08 +08:00 committed by GitHub
commit e6e790935f
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -0,0 +1,26 @@
# action for nginx-ultimate-bad-bot-blocker fail2ban-addon to use ufw as the blocking firewall
# works with ipv4 and ipv6
# to use this change banaction = nginxrepeatoffender in jail.local to banaction = nginxrepeatoffender-ufw
[Definition]
actionstart =
actionstop =
actioncheck =
actionban = [ -n "<application>" ] && app="app <application>"
ufw prepend <blocktype> from <ip> to <destination> $app comment "Fail2Ban Repeated Offender"
actionunban = [ -n "<application>" ] && app="app <application>"
ufw delete <blocktype> from <ip> to <destination> $app
[Init]
# Option: blocktype
# Notes.: reject or deny
blocktype = deny
# Option: destination
# Notes.: The destination address to block in the ufw rule
destination = any
# Option: application
# Notes.: application from sudo ufw app list
application =