mirror of https://github.com/fail2ban/fail2ban
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
48 lines
1.9 KiB
48 lines
1.9 KiB
Source: fail2ban
|
|
Section: net
|
|
Priority: optional
|
|
Maintainer: Sergey G. Brester <fail2ban@sebres.de>
|
|
Uploaders: Sergey G. Brester <fail2ban@sebres.de>
|
|
Build-Depends:
|
|
debhelper (>= 9.20160709)
|
|
, dh-python
|
|
, python3
|
|
, python3-setuptools
|
|
, python3-pyinotify
|
|
, sqlite3
|
|
, 2to3
|
|
, pkg-config
|
|
, systemd
|
|
Homepage: https://www.fail2ban.org
|
|
Vcs-Git: https://github.com/fail2ban/fail2ban.git
|
|
Vcs-Browser: https://github.com/fail2ban/fail2ban
|
|
Standards-Version: 4.6.1
|
|
|
|
Package: fail2ban
|
|
Architecture: all
|
|
Depends: ${python3:Depends}, ${misc:Depends}, python3-systemd
|
|
Recommends: nftables | iptables, whois, python3-pyinotify
|
|
Suggests: mailx, system-log-daemon, monit, sqlite3
|
|
Description: ban hosts that cause multiple authentication errors
|
|
Fail2ban monitors log files (e.g. /var/log/auth.log,
|
|
/var/log/apache/access.log) and temporarily or persistently bans
|
|
failure-prone addresses by updating existing firewall rules. Fail2ban
|
|
allows easy specification of different actions to be taken such as to ban
|
|
an IP using iptables or hostsdeny rules, or simply to send a notification
|
|
email.
|
|
.
|
|
By default, it comes with filter expressions for various services
|
|
(sshd, Apache, proftpd, sasl, etc.) but configuration can be
|
|
easily extended for monitoring any other text file. All filters and
|
|
actions are given in the config files, thus fail2ban can be adopted
|
|
to be used with a variety of files and firewalls. Following recommends
|
|
are listed:
|
|
.
|
|
- iptables/nftables -- default installation uses iptables for banning.
|
|
nftables is also supported. You most probably need it
|
|
- whois -- used by a number of *mail-whois* actions to send notification
|
|
emails with whois information about attacker hosts. Unless you will use
|
|
those you don't need whois
|
|
- python3-pyinotify -- unless you monitor services logs via systemd, you
|
|
need pyinotify for efficient monitoring for log files changes
|