This actually has to do with iptables vs nftables but I need to be able to
deal with it here.

iptables wants the port ranges specified using a ":" as a separator but
nftables wants "-"...

The problem is in the default jail.conf which is:

# Ports to be banned
# Usually should be overridden in a particular jail
port = 0:65535

My current thought is to create two sub-packages:
fail2ban-iptables
fail2ban-nftables

I was thinking of using %post to do sed substitution for both packages (if
it's already correct it would end up being a no-op).

Installing nftables by default since all current releases of Fedora use it
by default.

Thoughts?

Thanks,
Richard
_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to