| Index: modules/fail2ban/templates/jail.erb | 
| =================================================================== | 
| new file mode 100644 | 
| --- /dev/null | 
| +++ b/modules/fail2ban/templates/jail.erb | 
| @@ -0,0 +1,12 @@ | 
| +<% @jail_config.each do |name, config| -%> | 
| +<% if !config['logpath'].empty? -%> | 
| +[<%= name %>] | 
| + | 
| +enabled = <%= config['enabled'] ||= true %> | 
| +port = <%= config['port'] ||= 'all' %> | 
| 
 
f.nicolaisen
2016/11/25 16:23:30
'all' is not a valid port range for iptables, ref
 
f.lopez
2016/11/25 17:41:10
Well, according to the examples provided by fail2b
 
 | 
| +filter = <%= name %> | 
| +logpath = <%= config['logpath'] %> | 
| +maxretry = <%= config['maxretry'] ||= 6 %> | 
| +bantime = <%= config['bantime']||= 3600 %> | 
| +<% end -%> | 
| +<% end -%> |