Sergey G. Brester
Sergey G. Brester
ATM I see 2 ways how one could make an action for that: either command action with curl/whatever to REST API of k8s, or probably more favorably a pythonic action...
I don't understand the RFE. If for example there is a `action.d/cloudflare.local` with: ```ini [Init] cftoken = abcdefgh cfuser = test ``` it will overwrite both init parameters from: https://github.com/fail2ban/fail2ban/blob/226a59445a8046b7f86c3bc072be1d78555ccdb0/config/action.d/cloudflare.conf#L81-L83...
> Let's say iptables-custom.local, then how can I inherit [INIT] variables from iptables-multiport.conf like chain, port, ... Take a look at some action using includes, for instance: https://github.com/fail2ban/fail2ban/blob/9bedc3c38385a2eb3c62677360c520a58819b9b1/config/action.d/iptables-multiport.conf#L8-L14 Thus either:...
> This might be intended functionality Yes this is intended. The reason for that - is the difficulty and/or possible conflicts by parameters of jails, filters and actions. The settings...
Basically it would be enough to set a precise `datepattern` matching everything before `Logon`, and then remove end-anchor by failregex: https://github.com/fail2ban/fail2ban/blob/9bedc3c38385a2eb3c62677360c520a58819b9b1/config/filter.d/mssql-auth.conf#L5 But because of catch-all `.*` in user-name, the RE...
I'm slowly really in mode to delete all mailing actions from stock fail2ban. Neither it is advisable to use them at all, nor I am interested to see issues like...
I'm not against all mailing actions, but against many of them (especially such with `whois` etc)... And even after "removal" one could use them further, just we'd not need to...
Don't understand why you need this new issue or why the discussion cannot continue further in #3669, but OK. > I believe it's necessary to add support for the stable...
1. Did I understand correctly, that the filter is intended to match `will be closed due to error` as a failure, but only if it follows `gnutls returned error on...
Just by the way, please note an amendment to PR description: ```diff -xarf-login-attack-local[mailargs=%(mailargs)s,mailcmd=%(mailcmd)s,bcc=%(bcc)s,dontsend=%(dontsend)s] +xarf-login-attack-local[mailargs=%(mailargs)s,mailcmd=%(mailcmd)s,bcc="%(bcc)s",dontsend="%(dontsend)s"] ``` without quotes it would supply wrong (truncated) arguments to the action.