anchor.diff:  
   # Default banning action (e.g. iptables, iptables-new,
   # iptables-multiport, shorewall, etc) It is used to define
  -# action_* variables. Can be overriden globally or per
  +# action_* variables. Can be overridden globally or per
   # section within jail.local file
   banaction = iptables-multiport
   
  +# email action. Since 0.8.1 upstream fail2ban uses sendmail
  +# MTA for the mailing. Change mta configuration parameter to mail
  +# if you want to revert to conventional 'mail'.
  +mta = sendmail
  +
  +# Default protocol
  +protocol = tcp
  +
  +# Specify chain where jumps would need to be added in iptables-* actions
  +chain = INPUT
   
   #
   # Action shortcuts. To be used to define action parameter
   
   # The simplest action to take: ban only
  -action_ = %(banaction)s[name=%(__name__)s, port="%(port)s"]
  +action_ = %(banaction)s[name=%(__name__)s, port="%(port)s", protocol="%(protocol)s", chain="%(chain)s"]
   
   # ban & send an e-mail with whois report to the destemail.
  -action_mw = %(banaction)s[name=%(__name__)s, port="%(port)s"]
  -              mail-whois[name=%(__name__)s, dest="%(destemail)s"]
  +action_mw = %(banaction)s[name=%(__name__)s, port="%(port)s", protocol="%(protocol)s", chain="%(chain)s"]
  +              %(mta)s-whois[name=%(__name__)s, dest="%(destemail)s", protocol="%(protocol)s", chain="%(chain)s"]
   
   # ban & send an e-mail with whois report and relevant log lines
   # to the destemail.
  -action_mwl = %(banaction)s[name=%(__name__)s, port="%(port)s"]
  -               mail-whois-lines[name=%(__name__)s, dest="%(destemail)s", logpath=%(logpath)s]
  +action_mwl = %(banaction)s[name=%(__name__)s, port="%(port)s", protocol="%(protocol)s", chain="%(chain)s"]
  +               %(mta)s-whois-lines[name=%(__name__)s, dest="%(destemail)s", logpath=%(logpath)s, chain="%(chain)s"]
   
   # Choose default action.  To change, just override value of 'action' with the
   # interpolation to the chosen action shortcut (e.g.  action_mw, action_mwl, etc) in jail.local
  
positive.code: [apache-multiport]
  
  enabled   = false
  port	  = http,https
  filter	  = apache-auth
  logpath   = /var/log/apache*/*access.log
  maxretry  = 6
  
  [apache-noscript]
  
  enabled = false
  port    = http,https
  filter  = apache-noscript
  logpath = /var/log/apache*/*error.log
  maxretry = 6
  
  #
  # FTP servers
  
negative.code: 
  [apache]
  
  enabled  = false
  port     = http,https
  filter   = apache-auth
  logpath  = /var/log/apache*/*error.log
  maxretry = 6
  
  # default action is now multiport, so apache-multiport jail was left
  