mirror of https://github.com/fail2ban/fail2ban
initial upgrade to 0.8.0
parent
ab18d77f6a
commit
10718c1036
|
@ -4,9 +4,14 @@
|
||||||
|_| \__,_|_|_/___|_.__/\__,_|_||_|
|
|_| \__,_|_|_/___|_.__/\__,_|_||_|
|
||||||
|
|
||||||
=============================================================
|
=============================================================
|
||||||
Fail2Ban (version 0.7.9) 2007/04/19
|
Fail2Ban (version 0.8.0) 2007/05/03
|
||||||
=============================================================
|
=============================================================
|
||||||
|
|
||||||
|
ver. 0.8.0 (2007/05/03) - stable
|
||||||
|
----------
|
||||||
|
- Fixed RedHat init script. Thanks to Jonathan Underwood
|
||||||
|
- Added Solaris 10 files. Thanks to Hanno 'Rince' Wagner
|
||||||
|
|
||||||
ver. 0.7.9 (2007/04/19) - release candidate
|
ver. 0.7.9 (2007/04/19) - release candidate
|
||||||
----------
|
----------
|
||||||
- Close opened handlers. Thanks to Yaroslav Halchenko
|
- Close opened handlers. Thanks to Yaroslav Halchenko
|
||||||
|
|
2
PKG-INFO
2
PKG-INFO
|
@ -1,6 +1,6 @@
|
||||||
Metadata-Version: 1.0
|
Metadata-Version: 1.0
|
||||||
Name: fail2ban
|
Name: fail2ban
|
||||||
Version: 0.7.9
|
Version: 0.8.0
|
||||||
Summary: Ban IPs that make too many password failure
|
Summary: Ban IPs that make too many password failure
|
||||||
Home-page: http://fail2ban.sourceforge.net
|
Home-page: http://fail2ban.sourceforge.net
|
||||||
Author: Cyril Jaquier
|
Author: Cyril Jaquier
|
||||||
|
|
13
README
13
README
|
@ -4,7 +4,7 @@
|
||||||
|_| \__,_|_|_/___|_.__/\__,_|_||_|
|
|_| \__,_|_|_/___|_.__/\__,_|_||_|
|
||||||
|
|
||||||
=============================================================
|
=============================================================
|
||||||
Fail2Ban (version 0.7.9) 2007/04/19
|
Fail2Ban (version 0.8.0) 2007/05/03
|
||||||
=============================================================
|
=============================================================
|
||||||
|
|
||||||
Fail2Ban scans log files like /var/log/pwdfail and bans IP
|
Fail2Ban scans log files like /var/log/pwdfail and bans IP
|
||||||
|
@ -28,16 +28,15 @@ Optional:
|
||||||
|
|
||||||
To install, just do:
|
To install, just do:
|
||||||
|
|
||||||
> tar xvfj fail2ban-0.7.9.tar.bz2
|
> tar xvfj fail2ban-0.8.0.tar.bz2
|
||||||
> cd fail2ban-0.7.9
|
> cd fail2ban-0.8.0
|
||||||
> python setup.py install
|
> python setup.py install
|
||||||
|
|
||||||
This will install Fail2Ban into /usr/share/fail2ban. The
|
This will install Fail2Ban into /usr/share/fail2ban. The
|
||||||
executable scripts are placed into /usr/bin.
|
executable scripts are placed into /usr/bin.
|
||||||
|
|
||||||
Gentoo: ebuilds are available on the website.
|
It is possible that Fail2ban is already packaged for your
|
||||||
Debian: Fail2Ban is in Debian unstable.
|
distribution. In this case, you should use it.
|
||||||
RedHat: packages are available on the website.
|
|
||||||
|
|
||||||
Fail2Ban should be correctly installed now. Just type:
|
Fail2Ban should be correctly installed now. Just type:
|
||||||
|
|
||||||
|
@ -74,7 +73,7 @@ Jonathan Kamens, Stephen Gildea, Markus Hoffmann, Mark
|
||||||
Edgington, Patrick Börjesson, kojiro, zugeschmiert, Tyler,
|
Edgington, Patrick Börjesson, kojiro, zugeschmiert, Tyler,
|
||||||
Nick Munger, Christoph Haas, Justin Shore, Joël Bertrand,
|
Nick Munger, Christoph Haas, Justin Shore, Joël Bertrand,
|
||||||
René Berber, mEDI, Axel Thimm, Eric Gerbier, Christian Rauch,
|
René Berber, mEDI, Axel Thimm, Eric Gerbier, Christian Rauch,
|
||||||
Michael C. Haller
|
Michael C. Haller, Jonathan Underwood, Hanno 'Rince' Wagner
|
||||||
|
|
||||||
License:
|
License:
|
||||||
--------
|
--------
|
||||||
|
|
|
@ -16,12 +16,12 @@
|
||||||
|
|
||||||
# Author: Cyril Jaquier
|
# Author: Cyril Jaquier
|
||||||
#
|
#
|
||||||
# $Revision: 571 $
|
# $Revision: 578 $
|
||||||
|
|
||||||
__author__ = "Cyril Jaquier"
|
__author__ = "Cyril Jaquier"
|
||||||
__version__ = "$Revision: 571 $"
|
__version__ = "$Revision: 578 $"
|
||||||
__date__ = "$Date: 2007-04-19 23:57:27 +0200 (Thu, 19 Apr 2007) $"
|
__date__ = "$Date: 2007-05-03 22:30:28 +0200 (Thu, 03 May 2007) $"
|
||||||
__copyright__ = "Copyright (c) 2004 Cyril Jaquier"
|
__copyright__ = "Copyright (c) 2004 Cyril Jaquier"
|
||||||
__license__ = "GPL"
|
__license__ = "GPL"
|
||||||
|
|
||||||
version = "0.7.9"
|
version = "0.8.0"
|
||||||
|
|
|
@ -1,3 +1,9 @@
|
||||||
|
fail2ban (0.8.0-1~pre1) UNRELEASED; urgency=low
|
||||||
|
|
||||||
|
* (NOT RELEASED YET) New upstream release
|
||||||
|
|
||||||
|
-- Yaroslav Halchenko <debian@onerussian.com> Sat, 05 May 2007 12:15:26 -0400
|
||||||
|
|
||||||
fail2ban (0.7.9-1) unstable; urgency=low
|
fail2ban (0.7.9-1) unstable; urgency=low
|
||||||
|
|
||||||
* New upstream release
|
* New upstream release
|
||||||
|
|
|
@ -20,7 +20,6 @@ FAIL2BAN="/usr/bin/fail2ban-client"
|
||||||
RETVAL=0
|
RETVAL=0
|
||||||
|
|
||||||
getpid() {
|
getpid() {
|
||||||
#pid=`ps -ef | grep fail2ban-|grep -v grep|grep -v bash|awk '{print $2}'`
|
|
||||||
pid=`ps -ef | grep fail2ban-|grep -v grep|awk '{print $2}'`
|
pid=`ps -ef | grep fail2ban-|grep -v grep|awk '{print $2}'`
|
||||||
}
|
}
|
||||||
|
|
||||||
|
@ -28,6 +27,7 @@ start() {
|
||||||
echo -n $"Starting fail2ban: "
|
echo -n $"Starting fail2ban: "
|
||||||
getpid
|
getpid
|
||||||
if [ -z "$pid" ]; then
|
if [ -z "$pid" ]; then
|
||||||
|
rm -rf /tmp/fail2ban.sock # in case of unclean shutdown
|
||||||
$FAIL2BAN start > /dev/null
|
$FAIL2BAN start > /dev/null
|
||||||
RETVAL=$?
|
RETVAL=$?
|
||||||
fi
|
fi
|
||||||
|
@ -47,7 +47,6 @@ stop() {
|
||||||
RETVAL=$?
|
RETVAL=$?
|
||||||
if [ -n "$pid" ]; then
|
if [ -n "$pid" ]; then
|
||||||
$FAIL2BAN stop > /dev/null
|
$FAIL2BAN stop > /dev/null
|
||||||
fi
|
|
||||||
sleep 1
|
sleep 1
|
||||||
getpid
|
getpid
|
||||||
if [ -z "$pid" ]; then
|
if [ -z "$pid" ]; then
|
||||||
|
@ -56,6 +55,9 @@ stop() {
|
||||||
else
|
else
|
||||||
echo_failure
|
echo_failure
|
||||||
fi
|
fi
|
||||||
|
else
|
||||||
|
echo_failure
|
||||||
|
fi
|
||||||
echo
|
echo
|
||||||
return $RETVAL
|
return $RETVAL
|
||||||
}
|
}
|
||||||
|
@ -72,6 +74,7 @@ case "$1" in
|
||||||
getpid
|
getpid
|
||||||
if [ -n "$pid" ]; then
|
if [ -n "$pid" ]; then
|
||||||
echo "Fail2ban (pid $pid) is running..."
|
echo "Fail2ban (pid $pid) is running..."
|
||||||
|
$FAIL2BAN status
|
||||||
else
|
else
|
||||||
RETVAL=1
|
RETVAL=1
|
||||||
echo "Fail2ban is stopped"
|
echo "Fail2ban is stopped"
|
||||||
|
|
|
@ -0,0 +1,74 @@
|
||||||
|
<?xml version='1.0'?>
|
||||||
|
<!DOCTYPE service_bundle SYSTEM '/usr/share/lib/xml/dtd/service_bundle.dtd.1'>
|
||||||
|
<!--
|
||||||
|
Hanno 'Rince' Wagner 03 2007
|
||||||
|
Service manifest for fail2ban
|
||||||
|
E-Mail: wagner@rince.de
|
||||||
|
-->
|
||||||
|
|
||||||
|
<service_bundle type='manifest' name='fail2ban:fail2ban'>
|
||||||
|
|
||||||
|
<service
|
||||||
|
name='network/fail2ban'
|
||||||
|
type='service'
|
||||||
|
version='1'>
|
||||||
|
<create_default_instance enabled='false' />
|
||||||
|
<single_instance />
|
||||||
|
|
||||||
|
<dependency name='fs'
|
||||||
|
grouping='require_all'
|
||||||
|
restart_on='none'
|
||||||
|
type='service'>
|
||||||
|
<service_fmri value='svc:/system/filesystem/local' />
|
||||||
|
</dependency>
|
||||||
|
|
||||||
|
<dependency name='net'
|
||||||
|
grouping='require_all'
|
||||||
|
restart_on='none'
|
||||||
|
type='service'>
|
||||||
|
<service_fmri value='svc:/network/loopback' />
|
||||||
|
</dependency>
|
||||||
|
|
||||||
|
|
||||||
|
<exec_method
|
||||||
|
type='method'
|
||||||
|
name='start'
|
||||||
|
exec='/lib/svc/method/svc-fail2ban start'
|
||||||
|
timeout_seconds='-1'>
|
||||||
|
<method_context>
|
||||||
|
<method_credential user='root' group='root' />
|
||||||
|
</method_context>
|
||||||
|
</exec_method>
|
||||||
|
|
||||||
|
<exec_method
|
||||||
|
type='method'
|
||||||
|
name='stop'
|
||||||
|
exec='/lib/svc/method/svc-fail2ban stop'
|
||||||
|
timeout_seconds='-1'>
|
||||||
|
</exec_method>
|
||||||
|
|
||||||
|
<exec_method
|
||||||
|
type='method'
|
||||||
|
name='reload'
|
||||||
|
exec='/lib/svc/method/svc-fail2ban reload'
|
||||||
|
timeout_seconds='-1'>
|
||||||
|
</exec_method>
|
||||||
|
|
||||||
|
<exec_method
|
||||||
|
type='method'
|
||||||
|
name='refresh'
|
||||||
|
exec='/lib/svc/method/svc-fail2ban refresh'
|
||||||
|
timeout_seconds='-1'>
|
||||||
|
</exec_method>
|
||||||
|
|
||||||
|
|
||||||
|
<exec_method
|
||||||
|
type='method'
|
||||||
|
name='restart'
|
||||||
|
exec='/lib/svc/method/svc-fail2ban restart'
|
||||||
|
timeout_seconds='-1'>
|
||||||
|
</exec_method>
|
||||||
|
|
||||||
|
</service>
|
||||||
|
|
||||||
|
</service_bundle>
|
|
@ -0,0 +1,47 @@
|
||||||
|
#!/usr/bin/bash -e
|
||||||
|
#
|
||||||
|
# fail2ban This init.d script is used to start fail2ban.
|
||||||
|
# (C) by Hanno Wagner <wagner@rince.de>, License is GPL
|
||||||
|
|
||||||
|
#set -x
|
||||||
|
|
||||||
|
. /lib/svc/share/smf_include.sh
|
||||||
|
|
||||||
|
set -e
|
||||||
|
|
||||||
|
|
||||||
|
F2B_CONF="/etc/fail2ban/fail2ban.conf"
|
||||||
|
if [ -n "$2" ] && [ -f "$F2B_CONF" ]; then
|
||||||
|
F2B_CONF="$2"
|
||||||
|
fi
|
||||||
|
|
||||||
|
ENV="/usr/bin/env -i LANG=C PATH=/usr/local/bin:/usr/bin:/bin:/opt/sfw/bin:/usr/sfw/bin"
|
||||||
|
|
||||||
|
case $1 in
|
||||||
|
start)
|
||||||
|
[ -f /etc/fail2ban.conf ] || touch /etc/fail2ban.conf
|
||||||
|
echo "Starting fail2ban-server with $F2B_CONF"
|
||||||
|
eval $ENV /usr/local/bin/fail2ban-client start &
|
||||||
|
;;
|
||||||
|
stop)
|
||||||
|
echo "Stopping fail2ban-server with $F2B_CONF"
|
||||||
|
eval $ENV /usr/local/bin/fail2ban-client stop &
|
||||||
|
;;
|
||||||
|
reload | refresh )
|
||||||
|
echo "Reloading fail2ban-server with $F2B_CONF"
|
||||||
|
eval $ENV /usr/local/bin/fail2ban-client reload &
|
||||||
|
;;
|
||||||
|
restart | force-reload)
|
||||||
|
echo "Forcing reload of fail2ban-server with $F2B_CONF"
|
||||||
|
eval $ENV /usr/local/bin/fail2ban-client stop &
|
||||||
|
sleep 2
|
||||||
|
eval $ENV /usr/local/bin/fail2ban-client start &
|
||||||
|
;;
|
||||||
|
status)
|
||||||
|
/usr/local/bin/fail2ban-client status &
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
echo "Usage: /lib/svc/method/svc-fail2ban start|stop|status|refresh|restart|reload|force-reload" >&2
|
||||||
|
exit 2
|
||||||
|
;;
|
||||||
|
esac
|
|
@ -1,11 +1,11 @@
|
||||||
.\" DO NOT MODIFY THIS FILE! It was generated by help2man 1.36.
|
.\" DO NOT MODIFY THIS FILE! It was generated by help2man 1.36.
|
||||||
.TH FAIL2BAN-CLIENT "1" "April 2007" "fail2ban-client v0.7.9" "User Commands"
|
.TH FAIL2BAN-CLIENT "1" "May 2007" "fail2ban-client v0.8.0" "User Commands"
|
||||||
.SH NAME
|
.SH NAME
|
||||||
fail2ban-client \- configure and control the server
|
fail2ban-client \- configure and control the server
|
||||||
.SH DESCRIPTION
|
.SH DESCRIPTION
|
||||||
[?1034hUsage: ../fail2ban\-client [OPTIONS] <COMMAND>
|
[?1034hUsage: ../fail2ban\-client [OPTIONS] <COMMAND>
|
||||||
.PP
|
.PP
|
||||||
Fail2Ban v0.7.9 reads log file that contains password failure report
|
Fail2Ban v0.8.0 reads log file that contains password failure report
|
||||||
and bans the corresponding IP addresses using firewall rules.
|
and bans the corresponding IP addresses using firewall rules.
|
||||||
.SH OPTIONS
|
.SH OPTIONS
|
||||||
.TP
|
.TP
|
||||||
|
|
|
@ -1,12 +1,12 @@
|
||||||
.\" DO NOT MODIFY THIS FILE! It was generated by help2man 1.36.
|
.\" DO NOT MODIFY THIS FILE! It was generated by help2man 1.36.
|
||||||
.TH FAIL2BAN-REGEX "1" "April 2007" "fail2ban-regex v0.7.9" "User Commands"
|
.TH FAIL2BAN-REGEX "1" "May 2007" "fail2ban-regex v0.8.0" "User Commands"
|
||||||
.SH NAME
|
.SH NAME
|
||||||
fail2ban-regex \- test Fail2ban "failregex" option
|
fail2ban-regex \- test Fail2ban "failregex" option
|
||||||
.SH SYNOPSIS
|
.SH SYNOPSIS
|
||||||
.B fail2ban-regex
|
.B fail2ban-regex
|
||||||
[\fIOPTIONS\fR] \fI<LOG> <REGEX>\fR
|
[\fIOPTIONS\fR] \fI<LOG> <REGEX>\fR
|
||||||
.SH DESCRIPTION
|
.SH DESCRIPTION
|
||||||
Fail2Ban v0.7.9 reads log file that contains password failure report
|
Fail2Ban v0.8.0 reads log file that contains password failure report
|
||||||
and bans the corresponding IP addresses using firewall rules.
|
and bans the corresponding IP addresses using firewall rules.
|
||||||
.PP
|
.PP
|
||||||
This tools can test regular expressions for "fail2ban".
|
This tools can test regular expressions for "fail2ban".
|
||||||
|
|
|
@ -1,12 +1,12 @@
|
||||||
.\" DO NOT MODIFY THIS FILE! It was generated by help2man 1.36.
|
.\" DO NOT MODIFY THIS FILE! It was generated by help2man 1.36.
|
||||||
.TH FAIL2BAN-SERVER "1" "April 2007" "fail2ban-server v0.7.9" "User Commands"
|
.TH FAIL2BAN-SERVER "1" "May 2007" "fail2ban-server v0.8.0" "User Commands"
|
||||||
.SH NAME
|
.SH NAME
|
||||||
fail2ban-server \- start the server
|
fail2ban-server \- start the server
|
||||||
.SH SYNOPSIS
|
.SH SYNOPSIS
|
||||||
.B fail2ban-server
|
.B fail2ban-server
|
||||||
[\fIOPTIONS\fR]
|
[\fIOPTIONS\fR]
|
||||||
.SH DESCRIPTION
|
.SH DESCRIPTION
|
||||||
Fail2Ban v0.7.9 reads log file that contains password failure report
|
Fail2Ban v0.8.0 reads log file that contains password failure report
|
||||||
and bans the corresponding IP addresses using firewall rules.
|
and bans the corresponding IP addresses using firewall rules.
|
||||||
.PP
|
.PP
|
||||||
Only use this command for debugging purpose. Start the server with
|
Only use this command for debugging purpose. Start the server with
|
||||||
|
|
Loading…
Reference in New Issue