backend/app/utils/jail_config.py

@@ -51,6 +51,8 @@ maxretry   = 1
 findtime   = 1d
 bantime    = 86400
 ignoreip   = 127.0.0.0/8 ::1 172.16.0.0/12
+banaction = iptables-multiport
+banaction_allports = iptables-allports
 """
 
 _BLOCKLIST_IMPORT_LOCAL = """\

backend/tests/test_utils/test_jail_config.py

@@ -68,6 +68,8 @@ class TestEnsureJailConfigs:
         # Blocklist-import jail must have a 24-hour ban time
         blocklist_conf = _read(jail_d, _BLOCKLIST_CONF)
         assert "bantime    = 86400" in blocklist_conf
+        assert "banaction = iptables-multiport" in blocklist_conf
+        assert "banaction_allports = iptables-allports" in blocklist_conf
 
         # .local files must set enabled = true and nothing else
         for local_file in (_MANUAL_LOCAL, _BLOCKLIST_LOCAL):