Add template to manage fail2ban.conf (see #1)
Also corrected some tests and documentation
This commit is contained in:
@@ -0,0 +1,8 @@
|
||||
# This file is managed by Puppet. DO NOT EDIT.
|
||||
#
|
||||
[Definition]
|
||||
loglevel = <%= scope.lookupvar('fail2ban::log_level') %>
|
||||
|
||||
logtarget = <%= scope.lookupvar('fail2ban::log_file') %>
|
||||
|
||||
socket = <%= scope.lookupvar('fail2ban::socket') %>
|
||||
@@ -1,13 +1,13 @@
|
||||
# This file is managed by Puppet. DO NOT EDIT.
|
||||
[DEFAULT]
|
||||
ignoreip = 127.0.0.1
|
||||
bantime = 600
|
||||
findtime = 600
|
||||
maxretry = 3
|
||||
backend = auto
|
||||
ignoreip = <%= scope.lookupvar('fail2ban::ignoreip') %>
|
||||
bantime = <%= scope.lookupvar('fail2ban::bantime') %>
|
||||
findtime = <%= scope.lookupvar('fail2ban::findtime') %>
|
||||
maxretry = <%= scope.lookupvar('fail2ban::maxretry') %>
|
||||
backend = <%= scope.lookupvar('fail2ban::backend') %>
|
||||
|
||||
[imap-iptables]
|
||||
enabled = <%= scope.lookupvar('fail2ban::jails').include? "imap" %>
|
||||
enabled = <%= scope.lookupvar('fail2ban::array_jails').include? "imap" %>
|
||||
filter = dovecot
|
||||
action = iptables[name=IMAP, port=imap, protocol=tcp]
|
||||
<% unless scope.lookupvar('fail2ban::mailto').empty? -%>
|
||||
@@ -17,7 +17,7 @@ logpath = /var/log/maillog
|
||||
maxretry = 5
|
||||
|
||||
[pop3-iptables]
|
||||
enabled = <%= scope.lookupvar('fail2ban::jails').include? "pop3" %>
|
||||
enabled = <%= scope.lookupvar('fail2ban::array_jails').include? "pop3" %>
|
||||
filter = mail
|
||||
action = iptables[name=POP3, port=pop3, protocol=tcp]
|
||||
<% unless scope.lookupvar('fail2ban::mailto').empty? -%>
|
||||
@@ -27,7 +27,7 @@ logpath = /var/log/maillog
|
||||
maxretry = 5
|
||||
|
||||
[ssh-iptables]
|
||||
enabled = <%= scope.lookupvar('fail2ban::jails').include? "ssh" %>
|
||||
enabled = <%= scope.lookupvar('fail2ban::array_jails').include? "ssh" %>
|
||||
filter = sshd
|
||||
action = iptables[name=SSH, port=ssh, protocol=tcp]
|
||||
<% unless scope.lookupvar('fail2ban::mailto').empty? -%>
|
||||
@@ -41,7 +41,7 @@ logpath = /var/log/secure
|
||||
maxretry = 5
|
||||
|
||||
[vsftpd-iptables]
|
||||
enabled = <%= scope.lookupvar('fail2ban::jails').include? "vsftpd" %>
|
||||
enabled = <%= scope.lookupvar('fail2ban::array_jails').include? "vsftpd" %>
|
||||
filter = vsftpd
|
||||
action = iptables[name=VSFTPD, port=ftp, protocol=tcp]
|
||||
<% unless scope.lookupvar('fail2ban::mailto').empty? -%>
|
||||
|
||||
Reference in New Issue
Block a user