From 78c120203e488babc11d10b6740872652264458b Mon Sep 17 00:00:00 2001
From: Tobias Knecht <tk@abusix.com>
Date: Wed, 17 Jun 2026 06:44:41 +0200
Subject: [PATCH] DOC: deprecate legacy xarf-login-attack action (x-arf 0.2)

---
 config/action.d/xarf-login-attack.conf | 5 +++++
 config/jail.conf                       | 1 +
 2 files changed, 6 insertions(+)

diff --git a/config/action.d/xarf-login-attack.conf b/config/action.d/xarf-login-attack.conf
index 00da7f79..9affd0b2 100644
--- a/config/action.d/xarf-login-attack.conf
+++ b/config/action.d/xarf-login-attack.conf
@@ -30,6 +30,11 @@
 #
 #
 
+# DEPRECATED: this action emits the obsolete x-arf 0.2 format. It is superseded
+# by the `xarf` action (XARF v4) - see action_xarf_v4 in jail.conf. This action
+# remains functional for now but will be removed in a future release. Please
+# migrate to action_xarf_v4.
+
 [Definition]
 
 # bypass ban/unban for restored tickets
diff --git a/config/jail.conf b/config/jail.conf
index 63503a4b..664954f2 100644
--- a/config/jail.conf
+++ b/config/jail.conf
@@ -229,6 +229,7 @@ action_mw = %(action_)s
 action_mwl = %(action_)s
              %(mta)s-whois-lines[sender="%(sender)s", dest="%(destemail)s", logpath="%(logpath)s", chain="%(chain)s"]
 
+# DEPRECATED (x-arf 0.2): use action_xarf_v4 (XARF v4) instead; this will be removed in a future release.
 # See the IMPORTANT note in action.d/xarf-login-attack for when to use this action
 #
 # ban & send a xarf e-mail to abuse contact of IP address and include relevant log lines