slightly corrected description for interpolations/parameters

debian-releases/etch
Yaroslav Halchenko 2006-12-07 23:10:30 +00:00
parent c46b9e0dca
commit 6d3c52a965
2 changed files with 18 additions and 17 deletions

25
debian/README.Debian vendored
View File

@ -37,18 +37,19 @@ NOTE: -e command line parameter is non existant in 0.7.x
* Interpolations vs actions/filters parameters: * Interpolations vs actions/filters parameters:
For details see #398739.
Summary: every pair of .conf and then .local (if exists) files read For details see #398739 or wait for a closure of #400416
separately from the others, so interpolations cannot penetrate from
(for instance) jail.* into actions.d/iptables.conf. To overcome this, Every pair of .conf and then .local (if exists) files is read
you are welcome to create/use any parameter which can be substituted separately from any other configuration file, so interpolations cannot
in actions/filters [Definition] section, whenever it is also defined penetrate from jail.* into actions.d/*. To overcome this, it is
in the [Init] section of that file and used in place of necessary necessary to create a PARAMETER which can be substituted in actions
placement as <parameter>. Parameters can be specified in the [Definition] section, if it is also defined in the [Init] section of
definitions within jail.{conf,local}. For instance 1 lengthy example, that file and is used in place of necessary allocation as <PARAMETER>
where fwchain is both used as interpolation (in jail.local) and tag. Parameters can be specified in the definitions within
parameter (in iptables-flex.local). jail.{conf,local}. For instance, 1 lengthy example, where the same
name "fwchain" is used both as interpolation (in jail.local) and as a
parameter (in iptables-flex.local) (from #398739)
==> /etc/fail2ban/jail.local <== ==> /etc/fail2ban/jail.local <==
[DEFAULT] [DEFAULT]
@ -199,4 +200,4 @@ P.S. Anyone is welcome to recommend proper security solution to this
issue, such as an alternative to sysklogd which allows better control issue, such as an alternative to sysklogd which allows better control
over users logging to specific facilities (such as AUTH) over users logging to specific facilities (such as AUTH)
-- Yaroslav O. Halchenko <debian@onerussian.com>, Wed, 6 Dec 2006 22:56:20 -0500 -- Yaroslav O. Halchenko <debian@onerussian.com>, Thu, 7 Dec 2006 18:09:36 -0500

10
debian/changelog vendored
View File

@ -3,13 +3,13 @@ fail2ban (0.7.4-5) unstable; urgency=low
* Added Suggests on mailx and relevant comments in README.Debian about * Added Suggests on mailx and relevant comments in README.Debian about
invoking mail actions (closes: #396668) invoking mail actions (closes: #396668)
* Removed obsolete entries in TODO and README * Removed obsolete entries in TODO and README
* README.Debian describes a bit issue of interpolations vs parameters passed * README.Debian describes the use of interpolations vs parameters passed
from jail.{conf,local} into an action or a filter definition (closes: from jail.{conf,local} into an action definitions (closes:
#398739) #398739)
* Initial version of postfix filter (closes: #377711) * Initial version of postfix filter has been present in 0.7 (closes:
#377711)
* Removed Uploaded field from control since I am a DD now. Big thanks to * Removed Uploaded field from control since I am a DD now. Big thanks to
Barak Pearlmutter for being the sponsor of my packages for few Barak Pearlmutter for being the sponsor of my packages for few years.
years.
-- Yaroslav O. Halchenko <debian@onerussian.com> Wed, 6 Dec 2006 22:14:26 -0500 -- Yaroslav O. Halchenko <debian@onerussian.com> Wed, 6 Dec 2006 22:14:26 -0500