fresh changes I forgotten to submit :-/

config/debian-initd

@@ -27,52 +27,47 @@ DAEMON_OPTS=$FAIL2BAN_OPTS
 set -e
 
 case "$1" in
-    start)
-	echo -n "Starting $DESC: "
-        [ -f $PIDFILE ] && [ ! -d /proc/`cat $PIDFILE` ] && rm -f $PIDFILE
-	start-stop-daemon --start --quiet --pidfile $PIDFILE \
-	    -b --exec $DAEMON -- $DAEMON_OPTS
-	echo "$NAME."
-	;;
-    stop)
-	echo -n "Stopping $DESC: "
-	start-stop-daemon --stop --quiet --pidfile $PIDFILE
-	echo "$NAME."
-	;;
-    restart|force-reload)
-	#
-	#	If the "reload" option is implemented, move the "force-reload"
-	#	option to the "reload" entry above. If not, "force-reload" is
-	#	just the same as "restart".
-	#
-	echo -n "Restarting $DESC: "
-        ( $0 stop )
-	sleep 1
-        $0 start
-	;;
+	start)
+		echo -n "Starting $DESC: "
+		[ -f $PIDFILE ] && [ ! -d /proc/`cat $PIDFILE` ] && rm -f $PIDFILE
+		start-stop-daemon --start --quiet --pidfile $PIDFILE \
+			-b --exec $DAEMON -- $DAEMON_OPTS
+		echo "$NAME."
+		;;
+	stop)
+		echo -n "Stopping $DESC: "
+		start-stop-daemon --stop --quiet --pidfile $PIDFILE
+		echo "$NAME."
+		;;
+	restart|force-reload)
+		echo -n "Restarting $DESC: "
+		( $0 stop )
+		sleep 1
+		$0 start
+		;;
     status)
-	echo -n "Status of $DESC: "
-	if [ ! -e "$PIDFILE" ]; then
-            echo "$NAME is not running."
-            exit 3
-	fi
-	if [ ! -r "$PIDFILE" ]; then
-            echo "$PIDFILE not readable, status of $NAME unknown."
-            exit 4
-	fi
-	if [ -d /proc/`cat "$PIDFILE"` ]; then
-            echo "$NAME is running."
-            exit 0
-	else
-            echo "$NAME is not running but $PIDFILE exists."
-            exit 1
-	fi
-	;;
-    *)
-	N=/etc/init.d/$NAME
-	echo "Usage: $N {start|stop|restart|force-reload|status}" >&2
-	exit 1
+		echo -n "Status of $DESC: "
+		if [ ! -e "$PIDFILE" ]; then
+			echo "$NAME is not running."
+			exit 3
+		fi
+		if [ ! -r "$PIDFILE" ]; then
+			echo "$PIDFILE not readable, status of $NAME unknown."
+			exit 4
+		fi
+		if [ -d /proc/`cat "$PIDFILE"` ]; then
+			echo "$NAME is running."
+			exit 0
+		else
+			echo "$NAME is not running but $PIDFILE exists."
+			exit 1
+		fi
 	;;
+	*)
+		N=/etc/init.d/$NAME
+		echo "Usage: $N {start|stop|restart|force-reload|status}" >&2
+		exit 1
+		;;
 esac
 
 exit 0

debian/README.Debian

@@ -15,8 +15,11 @@ fail2ban with apache, please enable apache section manually in
 /etc/fail2ban.conf.
 
 Currently no checks if an iptables queue generated at the beginning
-(fail2ban-http and fail2ban-ssh) exists. So if your firewall resets
-the iptable rules -- it is your responsibility to restart fail2ban.
+(fail2ban-http and fail2ban-ssh) exists. So if your firewall resets the iptable
+rules -- it is your responsibility to restart fail2ban.  Also you can
+augment fwban and fwunban rules and include as first lines full
+definitions of fwstart. That is nasty solution and probably it will get
+resolved in the future.
 
 See  TODO.Debian for more details, as well as the Debian Bug
 Tracking system.