wok-4.x rev 11341
fail2ban: enable ssh filter
author | Pascal Bellard <pascal.bellard@slitaz.org> |
---|---|
date | Sat Nov 26 15:38:48 2011 +0100 (2011-11-26) |
parents | 86a7edddf412 |
children | a5abb03b5817 |
files | fail2ban/receipt |
line diff
1.1 --- a/fail2ban/receipt Sat Nov 26 11:04:18 2011 +0100 1.2 +++ b/fail2ban/receipt Sat Nov 26 15:38:48 2011 +0100 1.3 @@ -3,24 +3,50 @@ 1.4 PACKAGE="fail2ban" 1.5 VERSION="0.8.4" 1.6 CATEGORY="network" 1.7 -SHORT_DESC="Scans log files to bans IP that makes too many password failures.." 1.8 +SHORT_DESC="Scans log files to bans IP that makes too many password failures." 1.9 MAINTAINER="pascal.bellard@slitaz.org" 1.10 TARBALL="$PACKAGE-$VERSION.tar.bz2" 1.11 WEB_SITE="http://www.fail2ban.org/wiki/index.php/Main_Page" 1.12 +DEPENDS="iptables" 1.13 BUILD_DEPENDS="python" 1.14 WGET_URL="$SF_MIRROR/$PACKAGE/$TARBALL" 1.15 TAGS="monitor network" 1.16 +CONFIG_FILES="/etc/fail2ban" 1.17 1.18 # Rules to configure and make the package. 1.19 compile_rules() 1.20 { 1.21 cd $src 1.22 - python setup.py install --root=$PWD/_pkg 1.23 + python setup.py install --root=$DESTDIR 1.24 } 1.25 1.26 # Rules to gen a SliTaz package suitable for Tazpkg. 1.27 genpkg_rules() 1.28 { 1.29 + mkdir -p $fs/etc/logrotate.d 1.30 cp -a $_pkg/* $fs 1.31 + sed -i -e 's|127.0.01|& 192.168.0.0/16|;s|sshd.log|messages|' \ 1.32 + -e '/ssh-iptables/{nn;s/false/true/}' $fs/etc/fail2ban/jail.conf 1.33 + cat >> $fs/etc/fail2ban/jail.conf <<EOT 1.34 +[ssh-ddos] 1.35 + 1.36 +enabled = true 1.37 +port = ssh,sftp 1.38 +filter = sshd-ddos 1.39 +action = iptables-allports[name=SSHDDOS] 1.40 +logpath = /var/log/messages 1.41 +maxretry = 2 1.42 + 1.43 +EOT 1.44 + ln -s /usr/bin/fail2ban-client $fs/etc/init.d/fail2ban 1.45 + cat > $fs/etc/logrotate.d/fail2ban <<EOT 1.46 +/var/log/fail2ban.log { 1.47 + weekly 1.48 + rotate 10 1.49 + compress 1.50 + postrotate 1.51 + /etc/init.d/fail2ban reload >/dev/null || true 1.52 + endscript 1.53 } 1.54 - 1.55 +EOT 1.56 +}