['set', 'syslogsocket', 'auto']
['set', 'loglevel', 'INFO']
['set', 'logtarget', '/run/fail2ban-fixture/server.log']
['set', 'allowipv6', 'no']
['set', 'dbfile', '/run/fail2ban-fixture/state.sqlite3']
['set', 'dbpurgeage', '86400']
['add', 'administrator-web', 'polling']
['set', 'administrator-web', 'usedns', 'no']
['set', 'administrator-web', 'addfailregex', '^<HOST> failed$']
['set', 'administrator-web', 'datepattern', '{NONE}']
['set', 'administrator-web', 'maxretry', 1]
['set', 'administrator-web', 'findtime', '600']
['set', 'administrator-web', 'bantime', '3600']
['set', 'administrator-web', 'ignoreself', False]
['set', 'administrator-web', 'addignoreip']
['set', 'administrator-web', 'addlogpath', '/run/fail2ban-fixture/synthetic.log', 'head']
['set', 'administrator-web', 'addaction', 'nftables-allports']
['multi-set', 'administrator-web', 'action', 'nftables-allports', [['actionstart', 'nft add table inet f2b-table\nnft -- add chain inet f2b-table f2b-chain \\{ type filter hook input priority -1 \\; \\}\nnft add set inet f2b-table <addr_set> \\{ type <addr_type>\\; \\}\n\nnft add rule inet f2b-table f2b-chain meta l4proto \\{ tcp \\} <addr_family> saddr @<addr_set> reject\n'], ['actionstop', "{ nft -a list chain inet f2b-table f2b-chain | grep -oP '@<addr_set>\\s+.*\\s+\\Khandle\\s+(\\d+)$'; } | while read -r hdl; do\nnft delete rule inet f2b-table f2b-chain $hdl; done\nnft delete set inet f2b-table <addr_set>\n{ nft list table inet f2b-table | grep -qP '^\\s+set\\s+'; } || {\nnft delete table inet f2b-table\n}"], ['actionflush', "{ nft flush set inet f2b-table <addr_set> 2> /dev/null; } || {\n{ nft -a list chain inet f2b-table f2b-chain | grep -oP '@<addr_set>\\s+.*\\s+\\Khandle\\s+(\\d+)$'; } | while read -r hdl; do\nnft delete rule inet f2b-table f2b-chain $hdl; done\nnft delete set inet f2b-table <addr_set>\nnft add set inet f2b-table <addr_set> \\{ type <addr_type>\\; \\}\n\nnft add rule inet f2b-table f2b-chain meta l4proto \\{ tcp \\} <addr_family> saddr @<addr_set> reject\n\n}"], ['actioncheck', "nft list chain inet f2b-table f2b-chain | grep -q '@<addr_set>[ \\t]'"], ['actionban', 'nft add element inet f2b-table <addr_set> \\{ <ip> \\}'], ['actionunban', 'nft delete element inet f2b-table <addr_set> \\{ <ip> \\}'], ['name', 'administrator-web'], ['actname', 'nftables-allports'], ['table', 'f2b-table'], ['table_family', 'inet'], ['chain', 'f2b-chain'], ['chain_type', 'filter'], ['chain_hook', 'input'], ['chain_priority', '-1'], ['addr_type', 'ipv4_addr'], ['port', 'ssh'], ['protocol', 'tcp'], ['blocktype', 'reject'], ['nftables', 'nft'], ['addr_set', 'addr-set-<name>'], ['addr_family', 'ip'], ['addr_family?family=inet6', 'ip6'], ['addr_type?family=inet6', 'ipv6_addr'], ['addr_set?family=inet6', 'addr6-set-<name>']]]
['start', 'administrator-web']
