reaction/cdc.md

Serveur

reactiond <FILEPATH>

Avec un défaut à /etc/reaction/reactiond.conf

actions:
  iptables:
    
regexes:
  IP: '(([0-9]{1,3}\.){3}[0-9]{1,3})|([0-9a-fA-F:]{2,90})'

streams:
 nextcloud:
   cmd: journalctl -fu phpfpm-nextcloud.service
   actions:
     - regex: '"message":"Login failed: .\+ (Remote IP: \(?<IP>[0-9a-fA-F.:]\+\))"'
       # Can also be a list
       cmd: iptables -I f2b-nextcloud 1 -s <ip> -j <blocktype>

reactionc: le client