Preconfigure fail2ban and core security services by default

2026-05-10 20:13:30 +00:00
parent be6ddf1416
commit 43734fe1b1
9 changed files with 139 additions and 35 deletions
@@ -0,0 +1,10 @@
+# Managed by sicherheit-install
+*filter
+:ufw-after-input - [0:0]
+:ufw-after-output - [0:0]
+:ufw-after-forward - [0:0]
+
+# Drop invalid packets early
+-A ufw-after-input -m conntrack --ctstate INVALID -j DROP
+
+COMMIT