--On Sunday, August 25, 2019 9:36 AM +0000 "STR ." <[email protected]> wrote:

fail2ban flushes these rules whenever there is a new ban and I would
like it to co-exist with my custom rules, how would I achieve this?

Add an iptables rule in your custom rules to create an empty subchain of INPUT for fail2ban to use named fail2ban_root. fail2ban should only touch this chain and its subchains.

Create action.d/iptables-common.local and add:

[Init]
chain = fail2ban_root




_______________________________________________
Fail2ban-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fail2ban-users

Reply via email to