Skip to content

Instantly share code, notes, and snippets.

@ersin-demirtas

ersin-demirtas/iptables-common.conf

Last active October 13, 2018 08:48
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save ersin-demirtas/4da3bea85f7b8dba931b5584d5d076ec to your computer and use it in GitHub Desktop.
Save ersin-demirtas/4da3bea85f7b8dba931b5584d5d076ec to your computer and use it in GitHub Desktop.
Download ZIP
Fail2Ban DROP instead of REJECT
Raw
iptables-common.conf
# If iptables-common.conf doesn't exists the update iptables-blocktype.conf instead.
#edit /etc/fail2ban/action.d/iptables-common.conf
#Please read https://serverfault.com/questions/157375/reject-vs-drop-when-using-iptables?answertab=active#tab-top before you start using.
# Find and comment out
# blocktype = REJECT --reject-with icmp-port-unreachable
# Replace with
blocktype = DROP
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment