add default banactions for several paths-*.conf depending on default net-filter for distribution;

closes gh-4224, gh-4229

ChangeLog

@@ -15,6 +15,8 @@ ver. 1.1.2-dev-1 (20??/??/??) - development nightly edition
 * `filter.d/apache-noscript.conf` - match a request for the `cgi-bin` directory itself (no script name after it),
   the `cgi-bin` alternative required a following path segment so `/cgi-bin/` and `/cgi-bin` were not matched (gh-4217)
 * sockets passed via `systemd` socket activation (`sd_listen_fds(3)`) are not shut down or removed anymore (gh-4225)
+* `paths-*.conf`: add default banactions for several includes depending on default net-filter for distribution (gh-4224, gh-4229):
+  `paths-arch.conf`, `paths-fedora.conf`, `paths-opensuse.conf` - nftables, `paths-freebsd.conf`, `paths-osx.conf ` - pf;
 
 ### New Features and Enhancements
 * `filter.d/cowrie.conf` - new filter and jail for Cowrie SSH/Telnet honeypot JSON log output (gh-4216)

config/paths-arch.conf

@@ -9,6 +9,9 @@ after  = paths-overrides.local
 
 [DEFAULT]
 
+banaction = nftables
+banaction_allports = nftables[type=allports]
+
 apache_error_log = /var/log/httpd/*error_log
 
 apache_access_log = /var/log/httpd/*access_log

config/paths-fedora.conf

@@ -9,6 +9,9 @@ after  = paths-overrides.local
 
 [DEFAULT]
 
+banaction = nftables
+banaction_allports = nftables[type=allports]
+
 syslog_mail = /var/log/maillog
 
 syslog_mail_warn = /var/log/maillog

config/paths-freebsd.conf

@@ -9,6 +9,9 @@ after  = paths-overrides.local
 
 [DEFAULT]
 
+banaction = pf
+banaction_allports = pf[actiontype=<allports>]
+
 # http://www.freebsd.org/doc/handbook/configtuning-syslog.html
 #
 syslog_mail = /var/log/maillog

config/paths-opensuse.conf

@@ -9,12 +9,27 @@ after  = paths-overrides.local
 
 [DEFAULT]
 
+banaction = nftables
+banaction_allports = nftables[type=allports]
+
+syslog_local0  = /var/log/messages
+
 syslog_mail = /var/log/mail
 
 syslog_mail_warn = %(syslog_mail)s
 
 syslog_authpriv = %(syslog_local0)s
 
+syslog_user =  %(syslog_local0)s
+
+syslog_ftp  = %(syslog_local0)s
+
+syslog_daemon  = %(syslog_local0)s
+
+apache_error_log = /var/log/apache2/*error_log
+
+apache_access_log = /var/log/apache2/*access_log
+
 pureftpd_log = %(syslog_local0)s
 
 exim_main_log = /var/log/exim/main.log

config/paths-osx.conf

@@ -10,6 +10,9 @@ after  = paths-overrides.local
 
 [DEFAULT]
 
+banaction = pf
+banaction_allports = pf[actiontype=<allports>]
+
 syslog_mail = /var/log/mail.log
 
 syslog_mail_warn = /var/log/mail.warn