26 lines
1.0 KiB
Plaintext
26 lines
1.0 KiB
Plaintext
# ──────────────────────────────────────────────────────────────
|
|
# BanGUI — Blocklist-import jail
|
|
#
|
|
# Dedicated jail for IPs banned via the BanGUI blocklist import
|
|
# feature. This is a manual-ban jail: it does not watch any log
|
|
# file. All bans are injected programmatically via
|
|
# fail2ban-client set blocklist-import banip <ip>
|
|
# which the BanGUI backend uses through its fail2ban socket
|
|
# client.
|
|
# ──────────────────────────────────────────────────────────────
|
|
|
|
[blocklist-import]
|
|
|
|
enabled = true
|
|
# No log-based detection — only manual banip commands are used.
|
|
filter =
|
|
logpath = /dev/null
|
|
backend = auto
|
|
maxretry = 1
|
|
findtime = 1d
|
|
# Block imported IPs for 24 hours.
|
|
bantime = 86400
|
|
|
|
# Never ban the Docker bridge network or localhost.
|
|
ignoreip = 127.0.0.0/8 ::1 172.16.0.0/12
|