1 |
brianr |
1.1 |
%define version 0.1.18 |
2 |
jpp |
1.18 |
%define release 28 |
3 |
brianr |
1.1 |
%define name smeserver-fail2ban |
4 |
|
|
|
5 |
|
|
Summary: fail2ban integration on SME Server |
6 |
|
|
Name: %{name} |
7 |
|
|
Version: %{version} |
8 |
|
|
Release: %{release}%{?dist} |
9 |
|
|
Epoch: 9 |
10 |
|
|
License: GPL |
11 |
|
|
Group: Networking/Daemons |
12 |
|
|
Source: %{name}-%{version}.tar.gz |
13 |
jcrisp |
1.9 |
Patch0: smeserver-fail2ban-0.1.18.bz10767-adminpanel.patch |
14 |
brianr |
1.1 |
Patch1: smeserver-fail2ban-0.1.18.bz9709-wordpress.patch |
15 |
|
|
Patch2: smeserver-fail2ban-0.1.18.bz10775-sfail2ban.patch |
16 |
|
|
Patch3: smeserver-fail2ban-0.1.18-locale-2019-05-15.patch |
17 |
|
|
Patch4: smeserver-fail2ban-0.1.18-bz10776-wordpress.patch |
18 |
|
|
Patch5: smeserver-fail2ban-0.1.18-bz9669-sogo.patch |
19 |
|
|
Patch6: smeserver-fail2ban-0.1.18-bz10814-denylist-display.patch |
20 |
|
|
Patch7: smeserver-fail2ban-0.1.18-bz10817-configure.patch |
21 |
|
|
Patch8: smeserver-fail2ban-0.1.18.bz10839.patch |
22 |
|
|
Patch9: smeserver-fail2ban-0.1.18.bz10370.patch |
23 |
brianr |
1.2 |
Patch10: smeserver-fail2ban-0.1.18-Add-update-to-createlinks.patch |
24 |
terryfage |
1.3 |
Patch11: smeserver-fail2ban-0.1.18-bz11586-serverfailstostart.patch |
25 |
michel |
1.5 |
Patch12: smeserver-fail2ban-0.1.18-bz11636-smanager.patch |
26 |
terryfage |
1.6 |
Patch13: smeserver-fail2ban-0.1.18-locale-2021-08-22.patch |
27 |
terryfage |
1.7 |
Patch14: smeserver-fail2ban-0.1.18-locale-2021-09-08.patch |
28 |
terryfage |
1.8 |
Patch15: smeserver-fail2ban-0.1.18-bz11586-redofailtostart.patch |
29 |
jpp |
1.10 |
Patch16: smeserver-fail2ban-0.1.18-bz11650.patch |
30 |
jpp |
1.11 |
Patch17: smeserver-fail2ban-0.1.18-bz11651-wordpress.patch |
31 |
jpp |
1.12 |
Patch18: smeserver-fail2ban-0.1.18-bz10857.patch |
32 |
jpp |
1.13 |
Patch19: smeserver-fail2ban-0.1.18-bz10819-whitelisthostfix.patch |
33 |
brianr |
1.15 |
Patch20: smeserver-fail2ban-0.1.18-Add-class-to-div-for-AdminLTE.patch |
34 |
jpp |
1.16 |
Patch21: smeserver-fail2ban-0.1.18-locale-2022-07-22.patch |
35 |
jpp |
1.18 |
#Patch22: smeserver-fail2ban-0.1.18-bz12008-backup.patch |
36 |
terryfage |
1.3 |
|
37 |
brianr |
1.1 |
BuildRoot: /var/tmp/%{name}-%{version}-%{release}-buildroot |
38 |
|
|
BuildArchitectures: noarch |
39 |
|
|
BuildRequires: e-smith-devtools |
40 |
|
|
|
41 |
|
|
Requires: e-smith-base >= 5.2.0 |
42 |
jpp |
1.4 |
Requires: fail2ban-server, fail2ban-sendmail |
43 |
jcrisp |
1.9 |
Requires: perl-Data-Validate-IP |
44 |
jpp |
1.4 |
Obsoletes: fail2ban-firewalld, firewalld |
45 |
michel |
1.5 |
AutoReqProv: no |
46 |
brianr |
1.1 |
|
47 |
|
|
%description |
48 |
|
|
Configure fail2ban on SME Server |
49 |
|
|
|
50 |
|
|
%changelog |
51 |
jpp |
1.18 |
* Mon Jul 25 2022 Jean-Philippe Pialasse <tests@pialasse.com> 0.1.18-28.sme |
52 |
|
|
- revert previous patch, wrong package [SME: 12011] |
53 |
|
|
|
54 |
jpp |
1.17 |
* Fri Jul 22 2022 Jean-Philippe Pialasse <tests@pialasse.com> 0.1.18-27.sme |
55 |
|
|
- add to core backup [SME: 12011] |
56 |
|
|
|
57 |
jpp |
1.16 |
* Fri Jul 22 2022 Jean-Philippe Pialasse <tests@pialasse.com> 0.1.18-26.sme |
58 |
|
|
- apply locale patch 2022-07-22 |
59 |
|
|
|
60 |
brianr |
1.15 |
* Fri Jan 07 2022 Brian Read <brianr@bjsystems.co.uk> 0.1.18-25.sme |
61 |
|
|
- Add-class-to-div-for-AdminLTE [SME: 11837] |
62 |
|
|
|
63 |
jpp |
1.14 |
* Thu Dec 09 2021 Jean-Philippe Pialasse <tests@pialasse.com> 0.1.18-24.sme |
64 |
jpp |
1.13 |
- fix adding removing whitelisted hosts [SME: 10819] |
65 |
|
|
moved config options to dedicated page |
66 |
|
|
- removed apache-badbots.local, lot of false positives [SME: 10857] |
67 |
|
|
|
68 |
jpp |
1.12 |
* Wed Dec 08 2021 Jean-Philippe Pialasse <tests@pialasse.com> 0.1.18-22.sme |
69 |
jpp |
1.13 |
- fix apache-badbots logfile definition [SME: 10857] |
70 |
jpp |
1.12 |
add updated badbot list. |
71 |
|
|
|
72 |
jpp |
1.11 |
* Wed Dec 08 2021 Jean-Philippe Pialasse <tests@pialasse.com> 0.1.18-21.sme |
73 |
|
|
- update wordpress filters [SME: 11651] |
74 |
|
|
|
75 |
jpp |
1.10 |
* Wed Dec 08 2021 Jean-Philippe Pialasse <tests@pialasse.com> 0.1.18-20.sme |
76 |
|
|
- allow baning subnet [SME: 11650] |
77 |
|
|
|
78 |
jcrisp |
1.9 |
* Wed Oct 27 2021 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1.18-19.sme |
79 |
|
|
- Fix my versioning |
80 |
|
|
|
81 |
|
|
* Wed Oct 27 2021 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1.18-18.sme |
82 |
|
|
- Add Requires for perl-Data-Validate-IP [SME: 11720] |
83 |
|
|
|
84 |
terryfage |
1.8 |
* Sun Sep 12 2021 Terry Fage <terry.fage@gmail.com> 0.1.18-17.sme |
85 |
|
|
- redo fix for typo qpsmtpd status [SME: 11636] |
86 |
|
|
|
87 |
terryfage |
1.7 |
* Wed Sep 08 2021 Terry Fage <terry.fage@gmail.com> 0.1.18-16.sme |
88 |
|
|
- Update locale 2021-09-08 patch |
89 |
|
|
|
90 |
terryfage |
1.6 |
* Sun Aug 22 2021 Terry Fage <terry.fage@gmail.com> 0.1.18-15.sme |
91 |
|
|
- Update locale 2021-08-21 patch |
92 |
|
|
|
93 |
michel |
1.5 |
* Thu Jul 08 2021 Michel Begue <mab974@gmail.com> 0.1.18-14.sme |
94 |
|
|
- Add fail2ban panel in smeserver-manager [SME: 11636] |
95 |
|
|
- add smanager jail and filter |
96 |
|
|
- fix typo for qsmtpd status change |
97 |
|
|
- add AutoReqProv so smeserver-manager is not required |
98 |
|
|
|
99 |
jpp |
1.4 |
* Mon May 31 2021 Jean-Philippe Pialasse <tests@pialasse.com> 0.1.18-13.sme |
100 |
|
|
- fix requirements and avoid firewalld [SME: 10949] |
101 |
|
|
|
102 |
terryfage |
1.3 |
* Tue May 25 2021 Terry Fage <tfage@yahoo.com.au> 0.1.18-12.sme |
103 |
|
|
- Server Fails to Start SME10 [SME: 11586] |
104 |
|
|
|
105 |
brianr |
1.2 |
* Mon Apr 19 2021 Brian Read <brianr@bjsystems.co.uk> 0.1.18-11.sme |
106 |
|
|
- Initial import to SME10 [SME: 10949] |
107 |
|
|
- Add -update event to createlinks. |
108 |
|
|
|
109 |
brianr |
1.1 |
* Wed Nov 27 2019 Jean-Philipe Pialasse <tests@pialasse.com> 0.1.18-10.sme |
110 |
|
|
- fix wordpress template error [SME: 10839] |
111 |
|
|
- rewrite rule for [SME: 9719] |
112 |
|
|
- add configurable values for recidive jail [SME: 10370] |
113 |
|
|
|
114 |
|
|
* Wed Oct 16 2019 Jean-Philipe Pialasse <tests@pialasse.com> 0.1.18-9.sme |
115 |
|
|
- propagate configuration changes to fail2ban after submiting changes [SME: 10817] |
116 |
|
|
|
117 |
|
|
* Wed Oct 16 2019 Jean-Philipe Pialasse <tests@pialasse.com> 0.1.18-8.sme |
118 |
|
|
- fix blocked hosts list not displaying unless smeserver-denyhosts also installed [SME: 10814] |
119 |
|
|
|
120 |
|
|
* Fri Jul 19 2019 Jean-Philipe Pialasse <tests@pialasse.com> 0.1.18-7.sme |
121 |
|
|
- prevent fail2ban failure if sogo not installed while a backup restored db entries [SME: 9669] |
122 |
|
|
|
123 |
|
|
* Mon Jun 03 2019 Jean-Philipe Pialasse <tests@pialasse.com> 0.1.18-6.sme |
124 |
|
|
- fix incorrect permissions on sfail2ban [SME: 10775] |
125 |
|
|
|
126 |
|
|
* Mon Jun 03 2019 Jean-Philipe Pialasse <tests@pialasse.com> 0.1.18-5.sme |
127 |
|
|
- fix wordpress fragment error preventing jail.conf to be updated [SME: 10776] |
128 |
|
|
|
129 |
|
|
* Tue May 14 2019 Jean-Philipe Pialasse <tests@pialasse.com> 0.1.18-4.sme |
130 |
|
|
- fix missing sfail2ban exec [SME: 10775] |
131 |
|
|
- Apply locals |
132 |
|
|
|
133 |
|
|
* Tue Apr 09 2019 Jean-Philipe Pialasse <tests@pialasse.com> 0.1.18-3.sme |
134 |
|
|
- add admin panel [SME: 10767] |
135 |
|
|
- add wordpress jails and filters [SME: 9709] |
136 |
|
|
|
137 |
|
|
* Fri Oct 27 2017 Daniel Berteaud <daniel@firewall-services.com> - 0.1.18-1.sme |
138 |
|
|
- Ignore greylisting, from Michael McCarn [SME: 10447] |
139 |
|
|
|
140 |
|
|
* Thu Nov 17 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.1.17-1.sme |
141 |
|
|
- Makes sur log files exist before resuming monitoring after a logrotate |
142 |
|
|
[SME: 9875] |
143 |
|
|
|
144 |
|
|
* Tue Aug 2 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.1.16-1.sme |
145 |
|
|
- Add a new prop (FilterValidRemoteHosts) to allow blacklisting of hosts allowed |
146 |
|
|
to access the server-manager |
147 |
|
|
- Ignore 0.0.0.0/0.0.0.0 by default [SME: 9719] |
148 |
|
|
|
149 |
|
|
* Tue Jul 5 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.1.15-1.sme |
150 |
|
|
- Fix compat with older qpsmtpd |
151 |
|
|
|
152 |
|
|
* Thu Jun 9 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.1.14-1.sme |
153 |
|
|
- Update regex for qpsmtpd 0.96 |
154 |
|
|
|
155 |
|
|
* Mon Feb 29 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.1.13-1.sme |
156 |
|
|
- Ignore failure to get proxy.pac |
157 |
|
|
|
158 |
|
|
* Fri Jul 24 2015 Daniel Berteaud <daniel@firewall-services.com> - 0.1.12-1.sme |
159 |
|
|
- Updates for fail2ban 0.9.2 |
160 |
|
|
- Add more httpd jails |
161 |
|
|
- Switch to upstream Ejabberd filter |
162 |
|
|
|
163 |
|
|
* Wed Apr 15 2015 Daniel Berteaud <daniel@firewall-services.com> - 0.1.11-1.sme |
164 |
|
|
- Start fail2ban a bit later [SME: 8708] |
165 |
|
|
|
166 |
|
|
* Tue Jan 27 2015 Daniel Berteaud <daniel@firewall-services.com> - 0.1.10-1.sme |
167 |
|
|
- Suspend log monitoring during logrotate [SME: 8708] |
168 |
|
|
|
169 |
|
|
* Thu Jan 15 2015 Daniel Berteaud <daniel@firewall-services.com> - 0.1.9-1.sme |
170 |
|
|
- Fix LL::NG jail name |
171 |
|
|
|
172 |
|
|
* Wed Sep 17 2014 Daniel Berteaud <daniel@firewall-services.com> - 0.1.8-1.sme |
173 |
|
|
- Restart fail2ban during logrotate event so it re-open apache log file [SME: 8557] |
174 |
|
|
|
175 |
|
|
* Wed Jun 25 2014 Daniel Berteaud <daniel@firewall-services.com> - 0.1.7-1.sme |
176 |
|
|
- Correctly handle single IP in IgnoreIP prop |
177 |
|
|
|
178 |
|
|
* Tue Jun 24 2014 Daniel Berteaud <daniel@firewall-services.com> - 0.1.6-1.sme |
179 |
|
|
- Relax proxy regex so requests for proxy.pac aren't matched |
180 |
|
|
|
181 |
|
|
* Mon Jun 23 2014 Daniel Berteaud <daniel@firewall-services.com> - 0.1.5-1.sme |
182 |
|
|
- Pre-create the logfile so fail2ban can start the first time |
183 |
|
|
- Remove most warnings on startup |
184 |
|
|
|
185 |
|
|
* Wed Apr 23 2014 Daniel Berteaud <daniel@firewall-services.com> - 0.1.4-1.sme |
186 |
|
|
- New branch for SME9 |
187 |
|
|
- Remove sogo-auth.conf which is included in EL6 build of fail2ban |
188 |
|
|
|
189 |
|
|
* Wed Dec 18 2013 Daniel Berteaud <daniel@firewall-services.com> - 0.1.3-1.sme |
190 |
|
|
- Fix port, which was incorrectly set to proto |
191 |
|
|
|
192 |
|
|
* Tue Nov 19 2013 Daniel Berteaud <daniel@firewall-services.com> - 0.1.2-1.sme |
193 |
|
|
- Create the DB entries in one transaction to reduce the amount of log |
194 |
|
|
for each ban |
195 |
|
|
|
196 |
|
|
* Thu Jul 4 2013 Daniel Berteaud <daniel@firewall-services.com> - 0.1.1-1.sme |
197 |
|
|
- Fix service name for LemonLDAP::NG |
198 |
|
|
|
199 |
|
|
* Tue May 14 2013 Daniel Berteaud <daniel@firewall-services.com> - 0.1.0-1.sme |
200 |
|
|
- initial release |
201 |
|
|
|
202 |
|
|
%prep |
203 |
|
|
%setup -q -n %{name}-%{version} |
204 |
|
|
%patch0 -p1 |
205 |
|
|
%patch1 -p1 |
206 |
|
|
%patch2 -p1 |
207 |
|
|
%patch3 -p1 |
208 |
|
|
%patch4 -p1 |
209 |
|
|
%patch5 -p1 |
210 |
|
|
%patch6 -p1 |
211 |
|
|
%patch7 -p1 |
212 |
|
|
%patch8 -p1 |
213 |
|
|
%patch9 -p1 |
214 |
brianr |
1.2 |
%patch10 -p1 |
215 |
terryfage |
1.3 |
%patch11 -p1 |
216 |
michel |
1.5 |
%patch12 -p1 |
217 |
terryfage |
1.6 |
%patch13 -p1 |
218 |
terryfage |
1.7 |
%patch14 -p1 |
219 |
terryfage |
1.8 |
%patch15 -p1 |
220 |
jpp |
1.10 |
%patch16 -p1 |
221 |
jpp |
1.11 |
%patch17 -p1 |
222 |
jpp |
1.12 |
%patch18 -p1 |
223 |
jpp |
1.13 |
%patch19 -p1 |
224 |
brianr |
1.15 |
%patch20 -p1 |
225 |
jpp |
1.16 |
%patch21 -p1 |
226 |
jpp |
1.18 |
#%patch22 -p1 |
227 |
brianr |
1.1 |
|
228 |
|
|
%build |
229 |
|
|
%{__mkdir_p} root/var/log/fail2ban |
230 |
|
|
perl createlinks |
231 |
|
|
|
232 |
|
|
%install |
233 |
|
|
/bin/rm -rf $RPM_BUILD_ROOT |
234 |
|
|
(cd root ; /usr/bin/find . -depth -print | /bin/cpio -dump $RPM_BUILD_ROOT) |
235 |
|
|
/bin/rm -f %{name}-%{version}-filelist |
236 |
|
|
/sbin/e-smith/genfilelist $RPM_BUILD_ROOT \ |
237 |
|
|
--dir /var/log/fail2ban 'attr(0750,root,root)' \ |
238 |
|
|
--file /var/log/fail2ban/daemon.log 'config(noreplace) %attr(0600,root,root)' \ |
239 |
|
|
--file /etc/cron.daily/cleanup_fail2ban 'attr(0755,root,root)' \ |
240 |
|
|
--file /etc/fail2ban/filter.d/apache-auth.local 'config(noreplace) %attr(0644,root,root)' \ |
241 |
|
|
--file /usr/bin/sfail2ban 'attr(0755,root,root)' \ |
242 |
|
|
> %{name}-%{version}-filelist |
243 |
jpp |
1.14 |
#--file /etc/fail2ban/filter.d/apache-badbots.local 'config(noreplace) %attr(0644,root,root)' \ |
244 |
brianr |
1.1 |
|
245 |
|
|
%files -f %{name}-%{version}-filelist |
246 |
|
|
%defattr(-,root,root) |
247 |
|
|
|
248 |
|
|
%clean |
249 |
|
|
rm -rf $RPM_BUILD_ROOT |
250 |
|
|
|
251 |
|
|
%post |
252 |
|
|
|
253 |
|
|
%preun |