Skip to content

1.2.0

Compare
Choose a tag to compare
@Aldaviva Aldaviva released this 03 Jul 06:46
· 8 commits to master since this release
d1b113f
  • #30: Added new configuration option to let IP addresses or subnets in the reserved ranges 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16 get banned.
    • To enable, set neverBanReservedSubnets to false in configuration.json.
    • Backwards compatible: the default value is true, which preserves the old behavior of never banning addresses in those three ranges, even if this option is missing from the configuration file. Therefore, using an old configuration file written for a previous version of Fail2Ban4Win without this option will make it keep working the way it was, without you having to change the configuration file.
    • If you allow addresses in those three reserved ranges to get banned, but still want to prevent a subset of addresses from being banned, you can always manually add as many exempt ranges as you want to the neverBanSubnets array.
      • For example, to let addresses in 10.0.0.0/8 and 172.16.0.0/12 get banned, while ensuring that 192.168.0.0/16 cannot get banned, you could use the following configuration options.
        "neverBanReservedSubnets": false,
        "neverBanSubnets": [
            "192.168.0.0/16"
        ],