P a g e 39 | 64
TM1-5GM2020SG
processing in parallel (int/default: '4')
o
ban_fetchutil => name of the used download utility: 'uclient-fetch', 'wget', 'curl', 'aria2c'
(default: not set, automatically detected)
o
ban_fetchparm => special config options for the download utility (default: not set)
o
ban_autoblacklist => store auto-addons temporary in ipset and permanently in local
blacklist as well (bool/default: '1', enabled)
o
ban_autowhitelist => store auto-addons temporary in ipset and permanently in local
whitelist as well (bool/default: '1', enabled)
7.1.2 Logging of Banned Packets
•
by setting ban_log_src=1 / ban_log_dst=1 in the config options, banIP will log banned inbound
/ outbound packets to syslog.
•
example of a logged inbound (dst) and outbound (src) packet:
•
to change the default logging behavior, the following options can be added to the 'global' config
section:
o
ban_log_src_opts => IPv4 iptables LOG options for banned inbound packets (default:
'-m limit --limit 10/sec')
o
ban_log_src_opts_6 => IPv6 iptables LOG options for banned inbound packets (default:
'-m limit --limit 10/sec')
o
ban_log_src_prefix (default: '<ban_target_src>(src banIP) ', typically 'DROP(src banIP)
')
o
ban_log_src_prefix_6 (default: '<ban_target_src_6>(src banIP) ', typically 'DROP('src
banIP)' )
o
ban_log_dst_opts => IPv4 iptables LOG options for banned outbound packets (default:
'-m limit --limit 10/sec')
o
ban_log_dst_opts_6 => IPv6 iptables LOG options for banned outbound packets
(default: '-m limit --limit 10/sec')
o
ban_log_dst_prefix (default: '<ban_target_dst>(dst banIP) ', typically 'REJECT(dst
banIP) ')
o
ban_log_dst_prefix_6 (default: '<ban_target_dst_6>(dst banIP) ', typically
'REJECT('dst banIP)' )
