diff --git a/install.sh b/install.sh index 606056c..6ace9f5 100644 --- a/install.sh +++ b/install.sh @@ -80,7 +80,7 @@ firewall-cmd --permanent --zone=public --remove-service=dhcpv6-client # blacklist - for local blacklisting firewall-cmd --permanent --new-ipset=blacklist --type=hash:net firewall-cmd --permanent --ipset=blacklist --set-short=Blacklist -firewall-cmd --permanent --ipset=blacklist --set-description="Blacklist IP set for creating blacklists local to this server. Use fbl.sh & fwl.sh to add/remove IPs to the blacklist." +firewall-cmd --permanent --ipset=blacklist --set-description="Blacklist IP set for creating blacklists local to this server. Use firewall-blacklist-add.sh and firewall-blacklist-rem.sh to add/remove IPs to the blacklist." firewall-cmd --permanent --zone=drop --add-source=ipset:blacklist # fail2ban - fail2ban blocking firewall-cmd --permanent --new-ipset=fail2ban --type=hash:ip --option=timeout=90000