@ -15,6 +15,7 @@
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
# Author: Cyril Jaquier
# Modified by: Yaroslav Halchenko (SYSLOG, findtime)
#
# $Revision$
@ -144,7 +145,8 @@ def main():
logSys . addHandler ( stdout )
# Default formatter
formatter = logging . Formatter ( ' %(asctime)s %(levelname)s %(message)s ' )
formatterstring = ' %(levelname)s : %(message)s '
formatter = logging . Formatter ( ' %(asctime)s ' + formatterstring )
stdout . setFormatter ( formatter )
conf [ " verbose " ] = 0
@ -175,10 +177,13 @@ def main():
# Options
optionValues = ( [ " bool " , " background " , False ] ,
[ " str " , " logtargets " , " /var/log/fail2ban.log " ] ,
[ " str " , " syslog-target " , " /dev/log " ] ,
[ " int " , " syslog-facility " , 1 ] ,
[ " bool " , " debug " , False ] ,
[ " str " , " pidlock " , " /var/run/fail2ban.pid " ] ,
[ " int " , " maxfailures " , 5 ] ,
[ " int " , " bantime " , 600 ] ,
[ " int " , " findtime " , 600 ] ,
[ " str " , " ignoreip " , " " ] ,
[ " int " , " polltime " , 1 ] ,
[ " str " , " cmdstart " , " " ] ,
@ -226,9 +231,9 @@ def main():
# Set debug log level
if conf [ " debug " ] :
logSys . setLevel ( logging . DEBUG )
formatter = logging . Formatter ( " %(asctime)s %(levelname)s " +
" [ %(filename)s ( %(lineno)d )] " +
" %(message)s " )
formatter string = ( ' %(levelname)s : [ %(filename)s ( %(lineno)d )] ' +
' %(message)s ' )
formatter = logging . Formatter ( " %(asctime)s " + formatterstring )
stdout . setFormatter ( formatter )
logSys . warn ( " DEBUG MODE: FIREWALL COMMANDS ARE _NOT_ EXECUTED BUT " +
" ONLY DISPLAYED IN THE LOG MESSAGES " )
@ -238,10 +243,42 @@ def main():
# Bug fix for #1234699
os . umask ( 0077 )
for target in conf [ " logtargets " ] . split ( ) :
# target formatter
# By default global formatter is taken. Is different for SYSLOG
tformatter = formatter
if target == " STDERR " :
hdlr = logging . StreamHandler ( sys . stderr )
elif target == " SYSLOG " :
hdlr = logging . handlers . SysLogHandler ( )
# SYSLOG target can be either
# a socket (file, so it starts with /)
# or hostname
# or hostname:port
syslogtargets = re . findall ( " (/[ \ w/]*)|([^/ ][^: ]*)(:( \ d+)) { ,1} " ,
conf [ " syslog-target " ] )
# we are waiting for a single match
syslogtargets = syslogtargets [ 0 ]
# assign facility if it was defined
if conf [ " syslog-facility " ] < 0 :
facility = handlers . SysLogHandler . LOG_USER
else :
facility = conf [ " syslog-facility " ]
if len ( syslogtargets ) == 0 : # everything default
hdlr = logging . handlers . SysLogHandler ( )
else :
if not ( syslogtargets [ 0 ] == " " ) : # got socket
syslogtarget = syslogtargets [ 0 ]
else : # got hostname and may be a port
if syslogtargets [ 3 ] == " " : # no port specified
port = 514
else :
port = int ( syslogtargets [ 3 ] )
syslogtarget = ( syslogtargets [ 1 ] , port )
hdlr = logging . handlers . SysLogHandler ( syslogtarget , facility )
tformatter = logging . Formatter ( " fail2ban[ %(process)d ]: " +
formatterstring ) ;
else :
# Target should be a file
try :
@ -251,12 +288,12 @@ def main():
logSys . error ( " Unable to log to " + target )
continue
# Set formatter and add handler to logger
hdlr . setFormatter ( )
hdlr . setFormatter ( t formatter)
logSys . addHandler ( hdlr )
# Ignores IP list
ignoreIPList = conf [ " ignoreip " ] . split ( ' ' )
# Checks for root user. This is necessary because log files
# are owned by root and firewall needs root access.
if not checkForRoot ( ) :
@ -277,6 +314,7 @@ def main():
logSys . debug ( " ConfFile is " + conf [ " conffile " ] )
logSys . debug ( " BanTime is " + ` conf [ " bantime " ] ` )
logSys . debug ( " FindTime is " + ` conf [ " findtime " ] ` )
logSys . debug ( " MaxFailure is " + ` conf [ " maxfailures " ] ` )
# Options
@ -302,8 +340,9 @@ def main():
# Options
optionValues = ( [ " bool " , " enabled " , False ] ,
[ " str " , " logfile " , " /dev/null " ] ,
[ " int " , " maxfailures " , None ] ,
[ " int " , " bantime " , None ] ,
[ " int " , " maxfailures " , conf [ " maxfailures " ] ] ,
[ " int " , " bantime " , conf [ " bantime " ] ] ,
[ " int " , " findtime " , conf [ " findtime " ] ] ,
[ " str " , " timeregex " , " " ] ,
[ " str " , " timepattern " , " " ] ,
[ " str " , " failregex " , " " ] ,
@ -316,23 +355,12 @@ def main():
for t in confReader . getSections ( ) :
l = confReader . getLogOptions ( t , optionValues )
if l [ " enabled " ] :
# Override maxfailures option
if not l [ " maxfailures " ] == None :
maxFailures = l [ " maxfailures " ]
else :
maxFailures = conf [ " maxfailures " ]
# Override bantime option
if not l [ " bantime " ] == None :
banTime = l [ " bantime " ]
else :
banTime = conf [ " bantime " ]
# Creates a logreader object
lObj = LogReader ( l [ " logfile " ] , l [ " timeregex " ] , l [ " timepattern " ] ,
l [ " failregex " ] , maxFailures, banTime )
l [ " failregex " ] , l [ " maxfailures " ] , l [ " findtime " ] )
# Creates a firewall object
fObj = Firewall ( l [ " fwban " ] , l [ " fwunban " ] , banTime )
fObj = Firewall ( l [ " fwban " ] , l [ " fwunban " ] , l [ " bantime " ] )
# Links them into a list. I'm not really happy
# with this :/
logFwList . append ( [ t , lObj , fObj , dict ( ) , l ] )
Yaroslav Halchenko
19 years ago