reaction/cdc.md

23 lines
473 B
Markdown
Raw Normal View History

2023-03-18 21:39:01 +01:00
# Serveur
`reactiond <FILEPATH>`
Avec un défaut à `/etc/reaction/reactiond.conf`
```yaml
actions:
iptables:
regexes:
IP: '(([0-9]{1,3}\.){3}[0-9]{1,3})|([0-9a-fA-F:]{2,90})'
streams:
nextcloud:
command: journalctl -fu phpfpm-nextcloud.service
actions:
- regex: '"message":"Login failed: .\+ (Remote IP: \(?<IP>[0-9a-fA-F.:]\+\))"'
# Can also be a list
do: iptables -I f2b-nextcloud 1 -s <ip> -j <blocktype>
```
reactionc: le client