fail2ban-rs 1.2.1

A pure-Rust fail2ban replacement. Single static binary, fast two-phase matching, nftables/iptables firewall backends.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21

//! Etch-backed persistent ban state.
//!
//! Two collections: active bans keyed by (ip, jail), and per-IP ban counts
//! for ban time escalation.

use std::collections::HashMap;
use std::net::IpAddr;

use etchdb::{Replayable, Transactable};
use serde::{Deserialize, Serialize};

use crate::track::state::BanRecord;

/// Persistent ban state backed by etch WAL.
#[derive(Debug, Clone, Default, Serialize, Deserialize, Replayable, Transactable)]
pub struct BanState {
    #[etch(collection = 0)]
    pub bans: HashMap<(IpAddr, String), BanRecord>,
    #[etch(collection = 1)]
    pub ban_counts: HashMap<IpAddr, u32>,
}