feat: 更新 jail.local 配置，设置 nftables 作为防火墙动作

2026-04-26 17:56:46 +08:00 · 2026-04-26 17:56:46 +08:00 · 81c0ad846e
commit 81c0ad846e
parent 47d0a0fd22
1 changed files with 3 additions and 0 deletions
--- a/files/jail.local
+++ b/files/jail.local
@ -11,6 +11,9 @@ maxretry = 5
 # banaction = firewallcmd-ipset
 # action    = %(action_mwl)s

+banaction = nftables
+banaction_allports = nftables[type=allports]
+
 [sshd]
 enabled = true
 filter  = sshd