[patch] /etc/fail2ban/actions.d/iptables-allports.conf patch that detects when the chain allready exists

iptables-allports.conf.patch (text/plain), 656 bytes, created by john on 2011-04-02 02:03:20 UTC

--- fail2ban/iptables-allports.conf	2011-04-02 03:59:01.178912076 +0200
+++ /etc/fail2ban/action.d/iptables-allports.conf	2011-04-02 04:00:07.988912036 +0200
@@ -13,9 +13,12 @@
 # Notes.:  command executed once at the start of Fail2Ban.
 # Values:  CMD
 #
-actionstart = iptables -N fail2ban-<name>
+actionstart = sleep 1
+              iptables -n -L fail2ban-sshd &> /dev/null && exit 0
+              iptables -N fail2ban-<name>
               iptables -A fail2ban-<name> -j RETURN
               iptables -I INPUT -p <protocol> -j fail2ban-<name>
+              sleep 1
 
 # Option:  actionstop
 # Notes.:  command executed once at the end of Fail2Ban