I've only got this working with sshd which was my main concern but I have the following that seems to work:
In /etc/fail2ban/jail.d:
$ ll
total 16
-rw-r--r--. 1 root root 270 Oct 3 17:43 00-firewalld.conf
-rw-r--r--. 1 root root 272 Oct 3 17:43 00-systemd.conf
-rw-r--r--. 1 root root 40 Mar 19 2014 fedora-firewalld.local
-rw-r--r--. 1 root root 48 Mar 1 2015 sshd.local
$ cat fedora-firewalld.local
[DEFAULT]
banaction = firewallcmd-ipset
$ cat sshd.local
[DEFAULT]
bantime = 3600
[sshd]
enabled = true
I agree though that the firewalld and fail2ban maintainers should get together and find a way to support this automatically.
Thanks,
Richard
_______________________________________________ users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx
