CERBERUS/fail2ban
1
0
Fork 0
mirror of https://github.com/fail2ban/fail2ban.git synced 2026-06-27 19:21:04 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

ufw: fix fail2ban logs error when using kill-mode=conntrack

Browse source 
Ignore exit code 1 from conntrack -D and ss -K (no entries deleted) and skip kill commands during restoration.
This commit is contained in:
limuthu123 2026-05-31 12:37:33 +05:30
parent 34b42a6390
commit c3fdd03e1b
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
config/action.d/ufw.conf
View file

@ -39,8 +39,8 @@ kill-mode =
# intern conditional parameter used to provide killing mode after ban:
_kill_ =
_kill_ss = ss -K dst "[<ip>]"
_kill_conntrack = conntrack -D -s "<ip>"
_kill_ss = if [ "<restored>" != "1" ]; then ss -K dst "[<ip>]" || [ $? -eq 1 ]; fi
_kill_conntrack = if [ "<restored>" != "1" ]; then conntrack -D -s "<ip>" || [ $? -eq 1 ]; fi
# Option: kill
# Notes.: can be used to specify custom killing feature, by default depending on option kill-mode