FM / action.d

/etc/fail2ban/action.d

Name	Size	Mode	Actions
abuseipdb.conf	3748	0644	edit dl rm
apf.conf	587	0644	edit dl rm
badips.conf	629	0644	edit dl rm
badips.py	11536	0644	edit dl rm
blocklist_de.conf	2715	0644	edit dl rm
bsd-ipfw.conf	3226	0644	edit dl rm
cloudflare.conf	2970	0644	edit dl rm
complain.conf	4757	0644	edit dl rm
dshield.conf	7668	0644	edit dl rm
dummy.conf	1717	0644	edit dl rm
firewallcmd-allports.conf	1501	0644	edit dl rm
firewallcmd-common.conf	2649	0644	edit dl rm
firewallcmd-ipset.conf	2719	0644	edit dl rm
firewallcmd-multiport.conf	1322	0644	edit dl rm
firewallcmd-new.conf	1950	0644	edit dl rm
firewallcmd-rich-logging.conf	1021	0644	edit dl rm
firewallcmd-rich-rules.conf	1801	0644	edit dl rm
helpers-common.conf	592	0644	edit dl rm
hostsdeny.conf	1657	0644	edit dl rm
ipfilter.conf	1573	0644	edit dl rm
ipfw.conf	1505	0644	edit dl rm
iptables-allports.conf	1514	0644	edit dl rm
iptables-common.conf	2738	0644	edit dl rm
iptables-ipset-proto4.conf	2088	0644	edit dl rm
iptables-ipset-proto6-allports.conf	2742	0644	edit dl rm
iptables-ipset-proto6.conf	2785	0644	edit dl rm
iptables-multiport-log.conf	2170	0644	edit dl rm
iptables-multiport.conf	1508	0644	edit dl rm
iptables-new.conf	1585	0644	edit dl rm
iptables-xt_recent-echo.conf	2672	0644	edit dl rm
iptables.conf	1427	0644	edit dl rm
mail-buffered.conf	2431	0644	edit dl rm
mail-whois-common.conf	1051	0644	edit dl rm
mail-whois-lines.conf	2443	0644	edit dl rm
mail-whois.conf	1842	0644	edit dl rm
mail.conf	1709	0644	edit dl rm
mynetwatchman.conf	5321	0644	edit dl rm
netscaler.conf	1493	0644	edit dl rm
nftables-allports.conf	383	0644	edit dl rm
nftables-multiport.conf	384	0644	edit dl rm
nftables.conf	6318	0644	edit dl rm
nginx-block-map.conf	3746	0644	edit dl rm
npf.conf	1524	0644	edit dl rm
nsupdate.conf	3234	0644	edit dl rm
osx-afctl.conf	497	0644	edit dl rm
osx-ipfw.conf	2302	0644	edit dl rm
pf.conf	3750	0644	edit dl rm
route.conf	1023	0644	edit dl rm
sendmail-buffered.conf	2806	0644	edit dl rm
sendmail-common.conf	1938	0644	edit dl rm
sendmail-geoip-lines.conf	1761	0644	edit dl rm
sendmail-whois-ipjailmatches.conf	1055	0644	edit dl rm
sendmail-whois-ipmatches.conf	1036	0644	edit dl rm
sendmail-whois-lines.conf	1299	0644	edit dl rm
sendmail-whois-matches.conf	1000	0644	edit dl rm
sendmail-whois.conf	950	0644	edit dl rm
sendmail.conf	829	0644	edit dl rm
shorewall-ipset-proto6.conf	3521	0644	edit dl rm
shorewall.conf	2156	0644	edit dl rm
smtp.py	6277	0644	edit dl rm
symbiosis-blacklist-allports.conf	1418	0644	edit dl rm
ufw.conf	1045	0644	edit dl rm
xarf-login-attack.conf	6443	0644	edit dl rm

Edit: /etc/fail2ban/action.d/firewallcmd-common.conf (2649B)

# Fail2Ban configuration file
#
# Author: Donald Yandt
#

[Init]

# Option:  name
# Notes    Default name of the chain
# Values:  STRING
name = default

# Option   port
# Notes    Can also use port numbers separated by a comma and in rich-rules comma and/or space.
# Value    STRING Default: 1:65535
port = 1:65535

# Option:  protocol
# Notes    [ tcp | udp | icmp | all ]
# Values:  STRING Default: tcp
protocol = tcp

# Option:  family(ipv4)
# Notes    specifies the socket address family type
# Values:  STRING  
family = ipv4

# Option:  chain
# Notes    specifies the firewalld chain to which the Fail2Ban rules should be
#          added
# Values:  STRING  Default: INPUT_direct
chain = INPUT_direct

# Option:  zone
# Notes    use command firewall-cmd --get-active-zones to see a list of all active zones. See firewalld man pages for more information on zones
# Values:  STRING  Default: public
zone = public

# Option:  service
# Notes    use command firewall-cmd --get-services to see a list of services available
#          Examples services: amanda-client amanda-k5-client bacula bacula-client dhcp dhcpv6 dhcpv6-client dns freeipa-ldap freeipa-ldaps 
#          freeipa-replication ftp high-availability http https imaps ipp ipp-client ipsec iscsi-target kadmin kerberos 
#          kpasswd ldap ldaps libvirt libvirt-tls mdns mosh mountd ms-wbt mysql nfs ntp openvpn pmcd pmproxy pmwebapi pmwebapis pop3s 
#          postgresql privoxy proxy-dhcp puppetmaster radius rpc-bind rsyncd samba samba-client sane smtp squid ssh synergy 
#          telnet tftp tftp-client tinc tor-socks transmission-client vdsm vnc-server wbem-https xmpp-bosh xmpp-client xmpp-local xmpp-server
# Values:  STRING Default: ssh 
service = ssh

# Option:  rejecttype (ipv4)
# Notes    See iptables/firewalld man pages for ipv4 reject types. 
# Values:  STRING
rejecttype = icmp-port-unreachable

# Option:  blocktype (ipv4/ipv6)
# Notes    See iptables/firewalld man pages for jump targets. Common values are REJECT, 
#          REJECT --reject-with icmp-port-unreachable, DROP
# Values:  STRING
blocktype = REJECT --reject-with <rejecttype>

# Option:  rich-blocktype (ipv4/ipv6)
# Notes    See firewalld man pages for jump targets. Common values are reject, 
#          reject type="icmp-port-unreachable", drop
# Values:  STRING
rich-blocktype = reject type='<rejecttype>'

[Init?family=inet6]

# Option:  family(ipv6)
# Notes    specifies the socket address family type
# Values:  STRING  
family = ipv6

# Option:  rejecttype (ipv6)
# Note:    See iptables/firewalld man pages for ipv6 reject types. 
# Values:  STRING
rejecttype = icmp6-port-unreachable

cmd: