Na}{

File Content: `netscaler.conf`

# Fail2ban Citrix Netscaler Action
# by Juliano Jeziorny
# juliano@jeziorny.eu
#
# The script will add offender IPs to a dataset on netscaler, the dataset can then be used to block the IPs at a cs/vserver or global level
# This dataset is then used to block IPs using responder policies on the netscaler.
# 
# The script assumes using HTTPS with unsecure certificate to access the netscaler, 
# if you have a valid certificate installed remove the -k from the curl lines, or if you want http change it accordingly (and remove the -k)
# 
# This action depends on curl
#
# You need to populate the 3 options inside Init
#
# ns_host: IP or hostname of netslcaer appliance
# ns_auth: username:password, suggest base64 encoded for a little added security (echo -n "username:password" | base64)
# ns_dataset:  Name of the netscaler dataset holding the IPs to be blocked.
# 
# For further details on how to use it please check http://blog.ckzone.eu/2017/01/fail2ban-action-for-citrix-netscaler.html

[Init]
ns_host = 
ns_auth = 
ns_dataset = 

[Definition]
actionstart = curl -kH 'Authorization: Basic <ns_auth>' https://<ns_host>/nitro/v1/config

actioncheck = 

actionban = curl -k -H 'Authorization: Basic <ns_auth>' -X PUT -d '{"policydataset_value_binding":{"name":"<ns_dataset>","value":"<ip>"}}' https://<ns_host>/nitro/v1/config/

actionunban = curl -H 'Authorization: Basic <ns_auth>' -X DELETE -k "https://<ns_host>/nitro/v1/config/policydataset_value_binding/<ns_dataset>?args=value:<ip>"

Name	Size	Permission
abuseipdb.conf	3748 bytes	0644
apf.conf	587 bytes	0644
badips.conf	629 bytes	0644
badips.py	11536 bytes	0644
blocklist_de.conf	2715 bytes	0644
bsd-ipfw.conf	3226 bytes	0644
cloudflare.conf	2970 bytes	0644
complain.conf	4757 bytes	0644
dshield.conf	7668 bytes	0644
dummy.conf	1717 bytes	0644
failcentral-dreamhost.conf	415 bytes	0644
firewallcmd-allports.conf	1501 bytes	0644
firewallcmd-common.conf	2649 bytes	0644
firewallcmd-ipset.conf	2719 bytes	0644
firewallcmd-multiport.conf	1322 bytes	0644
firewallcmd-new.conf	1950 bytes	0644
firewallcmd-rich-logging.conf	1021 bytes	0644
firewallcmd-rich-rules.conf	1801 bytes	0644
helpers-common.conf	592 bytes	0644
hostsdeny.conf	1657 bytes	0644
ipfilter.conf	1573 bytes	0644
ipfw.conf	1505 bytes	0644
iptables-allports.conf	1514 bytes	0644
iptables-common.conf	2738 bytes	0644
iptables-ipset-proto4.conf	2088 bytes	0644
iptables-ipset-proto6-allports.conf	2742 bytes	0644
iptables-ipset-proto6.conf	2785 bytes	0644
iptables-multiport-log.conf	2170 bytes	0644
iptables-multiport.conf	1508 bytes	0644
iptables-new.conf	1585 bytes	0644
iptables-string.conf	1369 bytes	0644
iptables-xt_recent-echo.conf	2672 bytes	0644
iptables.conf	1427 bytes	0644
mail-buffered.conf	2431 bytes	0644
mail-whois-common.conf	1051 bytes	0644
mail-whois-lines.conf	2443 bytes	0644
mail-whois.conf	1842 bytes	0644
mail.conf	1709 bytes	0644
mynetwatchman.conf	5321 bytes	0644
ndn-central-action.conf	291 bytes	0644
ndn-fail2ban-central.pl	3910 bytes	0755
netscaler.conf	1493 bytes	0644
nftables-allports.conf	383 bytes	0644
nftables-multiport.conf	384 bytes	0644
nftables.conf	6318 bytes	0644
nginx-block-map.conf	3746 bytes	0644
npf.conf	1524 bytes	0644
nsupdate.conf	3234 bytes	0644
osx-afctl.conf	497 bytes	0644
osx-ipfw.conf	2302 bytes	0644
pf.conf	3750 bytes	0644
route.conf	1023 bytes	0644
sendmail-buffered.conf	2806 bytes	0644
sendmail-common.conf	1938 bytes	0644
sendmail-geoip-lines.conf	1761 bytes	0644
sendmail-whois-ipjailmatches.conf	1055 bytes	0644
sendmail-whois-ipmatches.conf	1036 bytes	0644
sendmail-whois-lines.conf	1299 bytes	0644
sendmail-whois-matches.conf	1000 bytes	0644
sendmail-whois.conf	950 bytes	0644
sendmail.conf	829 bytes	0644
shorewall-ipset-proto6.conf	3521 bytes	0644
shorewall.conf	2156 bytes	0644
smtp.py	6277 bytes	0644
symbiosis-blacklist-allports.conf	1418 bytes	0644
ufw.conf	1045 bytes	0644
xarf-login-attack.conf	6443 bytes	0644

Name

Size

Permission

Action

abuseipdb.conf

3748 bytes

0644