reaction/cdc.md
2023-03-19 23:09:59 +01:00

24 lines
471 B
Markdown

# Serveur
`reactiond <FILEPATH>`
Avec un défaut à `/etc/reaction/reactiond.conf`
```yaml
actions:
iptables:
regexes:
IP: '(([0-9]{1,3}\.){3}[0-9]{1,3})|([0-9a-fA-F:]{2,90})'
streams:
nextcloud:
cmd: journalctl -fu phpfpm-nextcloud.service
actions:
- regex: '"message":"Login failed: .\+ (Remote IP: \(?<IP>[0-9a-fA-F.:]\+\))"'
# Can also be a list
cmd: iptables -I f2b-nextcloud 1 -s <ip> -j <blocktype>
```
reactionc: le client