Add template to manage fail2ban.conf (see #1)

Also corrected some tests and documentation
This commit is contained in:
Javier Bértoli
2013-04-29 16:26:21 -03:00
parent d213d8408c
commit 3bcea81f82
5 changed files with 64 additions and 28 deletions
+8
View File
@@ -0,0 +1,8 @@
# This file is managed by Puppet. DO NOT EDIT.
#
[Definition]
loglevel = <%= scope.lookupvar('fail2ban::log_level') %>
logtarget = <%= scope.lookupvar('fail2ban::log_file') %>
socket = <%= scope.lookupvar('fail2ban::socket') %>
+9 -9
View File
@@ -1,13 +1,13 @@
# This file is managed by Puppet. DO NOT EDIT.
[DEFAULT]
ignoreip = 127.0.0.1
bantime = 600
findtime = 600
maxretry = 3
backend = auto
ignoreip = <%= scope.lookupvar('fail2ban::ignoreip') %>
bantime = <%= scope.lookupvar('fail2ban::bantime') %>
findtime = <%= scope.lookupvar('fail2ban::findtime') %>
maxretry = <%= scope.lookupvar('fail2ban::maxretry') %>
backend = <%= scope.lookupvar('fail2ban::backend') %>
[imap-iptables]
enabled = <%= scope.lookupvar('fail2ban::jails').include? "imap" %>
enabled = <%= scope.lookupvar('fail2ban::array_jails').include? "imap" %>
filter = dovecot
action = iptables[name=IMAP, port=imap, protocol=tcp]
<% unless scope.lookupvar('fail2ban::mailto').empty? -%>
@@ -17,7 +17,7 @@ logpath = /var/log/maillog
maxretry = 5
[pop3-iptables]
enabled = <%= scope.lookupvar('fail2ban::jails').include? "pop3" %>
enabled = <%= scope.lookupvar('fail2ban::array_jails').include? "pop3" %>
filter = mail
action = iptables[name=POP3, port=pop3, protocol=tcp]
<% unless scope.lookupvar('fail2ban::mailto').empty? -%>
@@ -27,7 +27,7 @@ logpath = /var/log/maillog
maxretry = 5
[ssh-iptables]
enabled = <%= scope.lookupvar('fail2ban::jails').include? "ssh" %>
enabled = <%= scope.lookupvar('fail2ban::array_jails').include? "ssh" %>
filter = sshd
action = iptables[name=SSH, port=ssh, protocol=tcp]
<% unless scope.lookupvar('fail2ban::mailto').empty? -%>
@@ -41,7 +41,7 @@ logpath = /var/log/secure
maxretry = 5
[vsftpd-iptables]
enabled = <%= scope.lookupvar('fail2ban::jails').include? "vsftpd" %>
enabled = <%= scope.lookupvar('fail2ban::array_jails').include? "vsftpd" %>
filter = vsftpd
action = iptables[name=VSFTPD, port=ftp, protocol=tcp]
<% unless scope.lookupvar('fail2ban::mailto').empty? -%>