Reaction, in Replacement of Fail2ban

blog.ppom.me

5 pointsadobrawy3 comments

I would be interested in using this with an nftables backend. I would need to figure out all the manual nft commands to manipulate the firewall. Hmmmm

> Let's first specify how reaction must recognize an IP.

I was on board until I read this. I have to supply my own regex for matching IP addresses…? What

It makes perfect sense, especially given the goal stated just before:

> I wanted a solution without default configuration, which would permit to admins to easily build their own, based on well documented examples. Then, only the abstraction needed would be used.

This removes the neeed of reaction to consider things like ipv4/ipv6. Note also that ip is also just an example here - looks like there can be arbitrary patterns here. You could add patterns for MAC addresses, peer identifiers in p2p networks, domains for federating servers, etc.

Reply on news.ycombinator.com