mirror of https://github.com/fail2ban/fail2ban
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
114 lines
2.6 KiB
114 lines
2.6 KiB
#!/bin/sh |
|
# |
|
### BEGIN INIT INFO |
|
# Provides: fail2ban |
|
# Required-Start: $remote_fs $local_fs |
|
# Should-Start: $syslog $time $network iptables |
|
# Required-Stop: $remote_fs $local_fs |
|
# Should-Stop: $syslog $time $network iptables |
|
# Default-Start: 3 5 |
|
# Default-Stop: 0 1 2 6 |
|
# Pidfile: /var/run/fail2ban/fail2ban.pid |
|
# Short-Description: Bans IPs with too many authentication failures |
|
# Description: Start fail2ban to scan logfiles and ban IP addresses |
|
# which make too many logfiles failures, and/or sent e-mails about |
|
### END INIT INFO |
|
|
|
# Check for missing binaries (stale symlinks should not happen) |
|
FAIL2BAN_CLI=/usr/bin/fail2ban-client |
|
test -x $FAIL2BAN_CLI || { echo "$FAIL2BAN_CLI not installed"; |
|
if [ "$1" = "stop" ]; then exit 0; |
|
else exit 5; fi; } |
|
FAIL2BAN_SRV=/usr/bin/fail2ban-server |
|
test -x $FAIL2BAN_SRV || { echo "$FAIL2BAN_SRV not installed"; |
|
if [ "$1" = "stop" ]; then exit 0; |
|
else exit 5; fi; } |
|
|
|
FAIL2BAN_CONFIG="/etc/sysconfig/fail2ban" |
|
FAIL2BAN_SOCKET_DIR="/var/run/fail2ban" |
|
FAIL2BAN_SOCKET="$FAIL2BAN_SOCKET_DIR/fail2ban.sock" |
|
FAIL2BAN_PID="$FAIL2BAN_SOCKET_DIR/fail2ban.pid" |
|
|
|
if [ -e $FAIL2BAN_CONFIG ]; then |
|
. $FAIL2BAN_CONFIG |
|
fi |
|
|
|
. /etc/rc.status |
|
rc_reset |
|
|
|
case "$1" in |
|
start) |
|
echo -n "Starting fail2ban " |
|
|
|
if [ ! -d $FAIL2BAN_SOCKET_DIR ]; then |
|
mkdir -p $FAIL2BAN_SOCKET_DIR |
|
fi |
|
|
|
if [ -e $FAIL2BAN_SOCKET ]; then |
|
if ! lsof -n $FAIL2BAN_SOCKET &>/dev/null; then |
|
rm $FAIL2BAN_SOCKET |
|
fi |
|
fi |
|
$FAIL2BAN_CLI -x -q $FAIL2BAN_OPTIONS start &>/dev/null 2>&1 |
|
|
|
rc_status -v |
|
;; |
|
stop) |
|
echo -n "Shutting down fail2ban " |
|
## Stop daemon with built-in functionality 'stop' |
|
/sbin/startproc -w $FAIL2BAN_CLI -q stop > /dev/null 2>&1 |
|
|
|
if [ -f $FAIL2BAN_SOCKET ] |
|
then |
|
echo "$FAIL2BAN_SOCKET not removed .. removing .." |
|
rm $FAIL2BAN_SOCKET |
|
fi |
|
if [ -f $FAIL2BAN_PID ] |
|
then |
|
echo "$FAIL2BAN_PID not removed .. removing .." |
|
rm $FAIL2BAN_PID |
|
fi |
|
|
|
|
|
rc_status -v |
|
;; |
|
try-restart|condrestart) |
|
$0 status |
|
if test $? = 0; then |
|
$0 restart |
|
else |
|
rc_reset # Not running is not a failure. |
|
fi |
|
rc_status |
|
;; |
|
restart) |
|
$0 stop |
|
i=60 |
|
while [ -e $FAIL2BAN_SOCKET ] && [ $i -gt 0 ]; do |
|
sleep 1 |
|
i=$[$i-1] |
|
echo -n "." |
|
done |
|
$0 start |
|
|
|
rc_status |
|
;; |
|
reload|force-reload) |
|
echo -n "Reload service Fail2ban " |
|
/sbin/startproc $FAIL2BAN_CLI -q reload > /dev/null 2>&1 |
|
|
|
rc_status -v |
|
;; |
|
status) |
|
echo -n "Checking for service fail2ban " |
|
/sbin/checkproc $FAIL2BAN_SRV |
|
|
|
rc_status -v |
|
;; |
|
*) |
|
echo "Usage: $0 {start|stop|status|try-restart|restart|force-reload|reload|probe}" |
|
exit 1 |
|
;; |
|
esac |
|
rc_exit |
|
|
|
|