puppet-fail2ban
puppet-fail2ban copied to clipboard
Still defaults to iptables instead of netfilter on distro that are using the later
Hello,
The module is still defaulting to iptables even on on distributions (like debian) that are now using netfilter by default
On debian 13, the following banaction and banaction_allports are set in the default configuration of the package but are reverted by puppet:
banaction = nftables
banaction_allports = nftables[type=allports]
Probably same for other distributions
Note that the values are set by a snippet (/etc/fail2ban/jail.d/defaults-debian.conf) installed on the filesystem and not the main configuration files
@bigon are you interested in providing a PR that switches to nftables?