mirror of https://github.com/fail2ban/fail2ban
115 lines
2.6 KiB
Bash
115 lines
2.6 KiB
Bash
#!/bin/sh
|
|
#
|
|
### BEGIN INIT INFO
|
|
# Provides: fail2ban
|
|
# Required-Start: $remote_fs $local_fs
|
|
# Should-Start: $syslog $time $network iptables
|
|
# Required-Stop: $remote_fs $local_fs
|
|
# Should-Stop: $syslog $time $network iptables
|
|
# Default-Start: 3 5
|
|
# Default-Stop: 0 1 2 6
|
|
# Pidfile: /var/run/fail2ban/fail2ban.pid
|
|
# Short-Description: Bans IPs with too many authentication failures
|
|
# Description: Start fail2ban to scan logfiles and ban IP addresses
|
|
# which make too many logfiles failures, and/or sent e-mails about
|
|
### END INIT INFO
|
|
|
|
# Check for missing binaries (stale symlinks should not happen)
|
|
FAIL2BAN_CLI=/usr/bin/fail2ban-client
|
|
test -x $FAIL2BAN_CLI || { echo "$FAIL2BAN_CLI not installed";
|
|
if [ "$1" = "stop" ]; then exit 0;
|
|
else exit 5; fi; }
|
|
FAIL2BAN_SRV=/usr/bin/fail2ban-server
|
|
test -x $FAIL2BAN_SRV || { echo "$FAIL2BAN_SRV not installed";
|
|
if [ "$1" = "stop" ]; then exit 0;
|
|
else exit 5; fi; }
|
|
|
|
FAIL2BAN_CONFIG="/etc/sysconfig/fail2ban"
|
|
FAIL2BAN_SOCKET_DIR="/var/run/fail2ban"
|
|
FAIL2BAN_SOCKET="$FAIL2BAN_SOCKET_DIR/fail2ban.sock"
|
|
FAIL2BAN_PID="$FAIL2BAN_SOCKET_DIR/fail2ban.pid"
|
|
|
|
if [ -e $FAIL2BAN_CONFIG ]; then
|
|
. $FAIL2BAN_CONFIG
|
|
fi
|
|
|
|
. /etc/rc.status
|
|
rc_reset
|
|
|
|
case "$1" in
|
|
start)
|
|
echo -n "Starting fail2ban "
|
|
|
|
if [ ! -d $FAIL2BAN_SOCKET_DIR ]; then
|
|
mkdir -p $FAIL2BAN_SOCKET_DIR
|
|
fi
|
|
|
|
if [ -e $FAIL2BAN_SOCKET ]; then
|
|
if ! lsof -n $FAIL2BAN_SOCKET &>/dev/null; then
|
|
rm $FAIL2BAN_SOCKET
|
|
fi
|
|
fi
|
|
$FAIL2BAN_CLI -x -q $FAIL2BAN_OPTIONS start &>/dev/null 2>&1
|
|
|
|
rc_status -v
|
|
;;
|
|
stop)
|
|
echo -n "Shutting down fail2ban "
|
|
## Stop daemon with built-in functionality 'stop'
|
|
/sbin/startproc -w $FAIL2BAN_CLI -q stop > /dev/null 2>&1
|
|
|
|
if [ -f $FAIL2BAN_SOCKET ]
|
|
then
|
|
echo "$FAIL2BAN_SOCKET not removed .. removing .."
|
|
rm $FAIL2BAN_SOCKET
|
|
fi
|
|
if [ -f $FAIL2BAN_PID ]
|
|
then
|
|
echo "$FAIL2BAN_PID not removed .. removing .."
|
|
rm $FAIL2BAN_PID
|
|
fi
|
|
|
|
|
|
rc_status -v
|
|
;;
|
|
try-restart|condrestart)
|
|
$0 status
|
|
if test $? = 0; then
|
|
$0 restart
|
|
else
|
|
rc_reset # Not running is not a failure.
|
|
fi
|
|
rc_status
|
|
;;
|
|
restart)
|
|
$0 stop
|
|
i=60
|
|
while [ -e $FAIL2BAN_SOCKET ] && [ $i -gt 0 ]; do
|
|
sleep 1
|
|
i=$[$i-1]
|
|
echo -n "."
|
|
done
|
|
$0 start
|
|
|
|
rc_status
|
|
;;
|
|
reload|force-reload)
|
|
echo -n "Reload service Fail2ban "
|
|
/sbin/startproc $FAIL2BAN_CLI -q reload > /dev/null 2>&1
|
|
|
|
rc_status -v
|
|
;;
|
|
status)
|
|
echo -n "Checking for service fail2ban "
|
|
/sbin/checkproc $FAIL2BAN_SRV
|
|
|
|
rc_status -v
|
|
;;
|
|
*)
|
|
echo "Usage: $0 {start|stop|status|try-restart|restart|force-reload|reload|probe}"
|
|
exit 1
|
|
;;
|
|
esac
|
|
rc_exit
|
|
|