On Tue, 23 Apr 2013, Steven Hiscocks wrote:
>  > +banaction = iptables-allports
>  > +# port actually must be irrelevant but lets leave it all for some possible uses
>  > +port     = anyport

>    Rather than anyport, or all in xinetd-fail below, you could put a range
>    which covers all ports 0:65535

since banaction is -allports port is irrelevant entirely.  So may be
indeed we should just default port = 0:65535, and omit port
specification for jails with -allports. right?
-- 
Yaroslav O. Halchenko, Ph.D.
http://neuro.debian.net http://www.pymvpa.org http://www.fail2ban.org
Senior Research Associate,     Psychological and Brain Sciences Dept.
Dartmouth College, 419 Moore Hall, Hinman Box 6207, Hanover, NH 03755
Phone: +1 (603) 646-9834                       Fax: +1 (603) 646-1419
WWW:   http://www.linkedin.com/in/yarik