# This jail never actually matches a log line - it exists only so fail2ban's
# start/stop lifecycle loads and tears down a static iptables blacklist (see
# action.d/blacklistip.conf and filter.d/blacklistip.conf). logpath must
# still point at a real, readable path or fail2ban refuses to start the
# jail; /dev/null is never written to and never matched, and the polling
# backend (rather than auto/pyinotify) avoids errors watching a special file.

[blacklistip]
enabled  = true
bantime  = -1
backend  = polling
logpath  = /dev/null
action   = blacklistip[name=blacklistip,filename='/etc/fail2ban/ip.blacklist']