hwdsl2 / setup-ipsec-vpn

Scripts to build your own IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2
Other
24.9k stars 6.28k forks source link

ipsec.conf obsolete keyword dpdaction and fail2ban conf warning #1560

Closed phant closed 3 months ago

phant commented 3 months ago

Checklist

Describe the enhancement request image

Is your enhancement request related to a problem? Please describe.

in mcedit /etc/ipsec.conf remove dpdaction=clear in /etc/fail2ban/fail2ban.conf uncomment allowipv6 = auto

hwdsl2 commented 3 months ago

@phant Hello! Thank you for your suggestions. For dpdaction=clear, because this project was recently updated to use Libreswan 5.0 (from 4.15), that option is kept in the configuration for backwards compatibility with the 4.15 version (for example, users may choose to downgrade to 4.15). It may be removed in a future update in this project.

For allowipv6 = auto, this is a new option in Fail2Ban 1.0. Because this project supports a wide range of Linux distributions, some may come with an older Fail2Ban version that does not support this option. See packages for Debian and Ubuntu, for example.