Browse Source

Merge pull request #24 from valibud/master

Add support for inet6 ipsets.
tags/v0.6.2
Niels Abspoel 6 years ago
parent
commit
22e301a218
No account linked to committer's email address
2 changed files with 20 additions and 1 deletions
  1. +5
    -0
      firewalld/files/ipset.xml
  2. +15
    -1
      pillar.example

+ 5
- 0
firewalld/files/ipset.xml View File

<option name="hashsize" value="{{ v }}"/> <option name="hashsize" value="{{ v }}"/>
{%- endfor %} {%- endfor %}
{%- endif %} {%- endif %}
{%- if 'family' in ipset.options %}
{%- for v in ipset.options.family %}
<option name="family" value="{{ v }}"/>
{%- endfor %}
{%- endif %}
{%- endif %} {%- endif %}
{%- if 'entries' in ipset %} {%- if 'entries' in ipset %}
{%- for v in ipset.entries %} {%- for v in ipset.entries %}

+ 15
- 1
pillar.example View File

- 1024 - 1024
entries: entries:
- 10.0.0.1 - 10.0.0.1
fail2ban-ssh-ipv6:
short: fail2ban-ssh-ipv6
description: fail2ban-ssh-ipv6 ipset
type: 'hash:ip'
options:
family:
- inet6
maxelem:
- 65536
timeout:
- 300
hashsize:
- 1024
entries:
- 2a01::1


zones: zones:
public: public:
MYPASSTHROUGH: MYPASSTHROUGH:
ipv: ipv4 ipv: ipv4
args: "-t raw -A MYCHAIN -j DROP" args: "-t raw -A MYCHAIN -j DROP"


Loading…
Cancel
Save