diff --git a/config/debian-initd b/config/debian-initd index 8694449d..2c5c48d1 100644 --- a/config/debian-initd +++ b/config/debian-initd @@ -27,52 +27,47 @@ DAEMON_OPTS=$FAIL2BAN_OPTS set -e case "$1" in - start) - echo -n "Starting $DESC: " - [ -f $PIDFILE ] && [ ! -d /proc/`cat $PIDFILE` ] && rm -f $PIDFILE - start-stop-daemon --start --quiet --pidfile $PIDFILE \ - -b --exec $DAEMON -- $DAEMON_OPTS - echo "$NAME." - ;; - stop) - echo -n "Stopping $DESC: " - start-stop-daemon --stop --quiet --pidfile $PIDFILE - echo "$NAME." - ;; - restart|force-reload) - # - # If the "reload" option is implemented, move the "force-reload" - # option to the "reload" entry above. If not, "force-reload" is - # just the same as "restart". - # - echo -n "Restarting $DESC: " - ( $0 stop ) - sleep 1 - $0 start - ;; + start) + echo -n "Starting $DESC: " + [ -f $PIDFILE ] && [ ! -d /proc/`cat $PIDFILE` ] && rm -f $PIDFILE + start-stop-daemon --start --quiet --pidfile $PIDFILE \ + -b --exec $DAEMON -- $DAEMON_OPTS + echo "$NAME." + ;; + stop) + echo -n "Stopping $DESC: " + start-stop-daemon --stop --quiet --pidfile $PIDFILE + echo "$NAME." + ;; + restart|force-reload) + echo -n "Restarting $DESC: " + ( $0 stop ) + sleep 1 + $0 start + ;; status) - echo -n "Status of $DESC: " - if [ ! -e "$PIDFILE" ]; then - echo "$NAME is not running." - exit 3 - fi - if [ ! -r "$PIDFILE" ]; then - echo "$PIDFILE not readable, status of $NAME unknown." - exit 4 - fi - if [ -d /proc/`cat "$PIDFILE"` ]; then - echo "$NAME is running." - exit 0 - else - echo "$NAME is not running but $PIDFILE exists." - exit 1 - fi - ;; - *) - N=/etc/init.d/$NAME - echo "Usage: $N {start|stop|restart|force-reload|status}" >&2 - exit 1 + echo -n "Status of $DESC: " + if [ ! -e "$PIDFILE" ]; then + echo "$NAME is not running." + exit 3 + fi + if [ ! -r "$PIDFILE" ]; then + echo "$PIDFILE not readable, status of $NAME unknown." + exit 4 + fi + if [ -d /proc/`cat "$PIDFILE"` ]; then + echo "$NAME is running." + exit 0 + else + echo "$NAME is not running but $PIDFILE exists." + exit 1 + fi ;; + *) + N=/etc/init.d/$NAME + echo "Usage: $N {start|stop|restart|force-reload|status}" >&2 + exit 1 + ;; esac exit 0 diff --git a/debian/README.Debian b/debian/README.Debian index 098ea358..034ccb3f 100644 --- a/debian/README.Debian +++ b/debian/README.Debian @@ -15,8 +15,11 @@ fail2ban with apache, please enable apache section manually in /etc/fail2ban.conf. Currently no checks if an iptables queue generated at the beginning -(fail2ban-http and fail2ban-ssh) exists. So if your firewall resets -the iptable rules -- it is your responsibility to restart fail2ban. +(fail2ban-http and fail2ban-ssh) exists. So if your firewall resets the iptable +rules -- it is your responsibility to restart fail2ban. Also you can +augment fwban and fwunban rules and include as first lines full +definitions of fwstart. That is nasty solution and probably it will get +resolved in the future. See TODO.Debian for more details, as well as the Debian Bug Tracking system.