| 1 |
jpp |
1.1 |
%define version 0.1.18 |
| 2 |
|
|
%define release 1 |
| 3 |
|
|
%define name smeserver-fail2ban |
| 4 |
|
|
|
| 5 |
|
|
|
| 6 |
|
|
Summary: fail2ban integration on SME Server |
| 7 |
|
|
Name: %{name} |
| 8 |
|
|
Version: %{version} |
| 9 |
|
|
Release: %{release}%{?dist} |
| 10 |
|
|
Epoch: 9 |
| 11 |
|
|
License: GPL |
| 12 |
|
|
Group: Networking/Daemons |
| 13 |
|
|
Source: %{name}-%{version}.tar.gz |
| 14 |
|
|
|
| 15 |
|
|
BuildRoot: /var/tmp/%{name}-%{version}-%{release}-buildroot |
| 16 |
|
|
BuildArchitectures: noarch |
| 17 |
|
|
BuildRequires: e-smith-devtools |
| 18 |
|
|
|
| 19 |
|
|
Requires: e-smith-base >= 5.2.0 |
| 20 |
|
|
Requires: fail2ban |
| 21 |
|
|
|
| 22 |
|
|
%description |
| 23 |
|
|
Configure fail2ban on SME Server |
| 24 |
|
|
|
| 25 |
|
|
%changelog |
| 26 |
|
|
* Fri Oct 27 2017 Daniel Berteaud <daniel@firewall-services.com> - 0.1.18-1.sme |
| 27 |
|
|
- Ignore greylisting, from Michael McCarn [SME: 10447] |
| 28 |
|
|
|
| 29 |
|
|
* Thu Nov 17 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.1.17-1.sme |
| 30 |
|
|
- Makes sur log files exist before resuming monitoring after a logrotate |
| 31 |
|
|
[SME: 9875] |
| 32 |
|
|
|
| 33 |
|
|
* Tue Aug 2 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.1.16-1.sme |
| 34 |
|
|
- Add a new prop (FilterValidRemoteHosts) to allow blacklisting of hosts allowed |
| 35 |
|
|
to access the server-manager |
| 36 |
|
|
- Ignore 0.0.0.0/0.0.0.0 by default [SME: 9719] |
| 37 |
|
|
|
| 38 |
|
|
* Tue Jul 5 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.1.15-1.sme |
| 39 |
|
|
- Fix compat with older qpsmtpd |
| 40 |
|
|
|
| 41 |
|
|
* Thu Jun 9 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.1.14-1.sme |
| 42 |
|
|
- Update regex for qpsmtpd 0.96 |
| 43 |
|
|
|
| 44 |
|
|
* Mon Feb 29 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.1.13-1.sme |
| 45 |
|
|
- Ignore failure to get proxy.pac |
| 46 |
|
|
|
| 47 |
|
|
* Fri Jul 24 2015 Daniel Berteaud <daniel@firewall-services.com> - 0.1.12-1.sme |
| 48 |
|
|
- Updates for fail2ban 0.9.2 |
| 49 |
|
|
- Add more httpd jails |
| 50 |
|
|
- Switch to upstream Ejabberd filter |
| 51 |
|
|
|
| 52 |
|
|
* Wed Apr 15 2015 Daniel Berteaud <daniel@firewall-services.com> - 0.1.11-1.sme |
| 53 |
|
|
- Start fail2ban a bit later [SME: 8708] |
| 54 |
|
|
|
| 55 |
|
|
* Tue Jan 27 2015 Daniel Berteaud <daniel@firewall-services.com> - 0.1.10-1.sme |
| 56 |
|
|
- Suspend log monitoring during logrotate [SME: 8708] |
| 57 |
|
|
|
| 58 |
|
|
* Thu Jan 15 2015 Daniel Berteaud <daniel@firewall-services.com> - 0.1.9-1.sme |
| 59 |
|
|
- Fix LL::NG jail name |
| 60 |
|
|
|
| 61 |
|
|
* Wed Sep 17 2014 Daniel Berteaud <daniel@firewall-services.com> - 0.1.8-1.sme |
| 62 |
|
|
- Restart fail2ban during logrotate event so it re-open apache log file [SME: 8557] |
| 63 |
|
|
|
| 64 |
|
|
* Wed Jun 25 2014 Daniel Berteaud <daniel@firewall-services.com> - 0.1.7-1.sme |
| 65 |
|
|
- Correctly handle single IP in IgnoreIP prop |
| 66 |
|
|
|
| 67 |
|
|
* Tue Jun 24 2014 Daniel Berteaud <daniel@firewall-services.com> - 0.1.6-1.sme |
| 68 |
|
|
- Relax proxy regex so requests for proxy.pac aren't matched |
| 69 |
|
|
|
| 70 |
|
|
* Mon Jun 23 2014 Daniel Berteaud <daniel@firewall-services.com> - 0.1.5-1.sme |
| 71 |
|
|
- Pre-create the logfile so fail2ban can start the first time |
| 72 |
|
|
- Remove most warnings on startup |
| 73 |
|
|
|
| 74 |
|
|
* Wed Apr 23 2014 Daniel Berteaud <daniel@firewall-services.com> - 0.1.4-1.sme |
| 75 |
|
|
- New branch for SME9 |
| 76 |
|
|
- Remove sogo-auth.conf which is included in EL6 build of fail2ban |
| 77 |
|
|
>>>>>>> sme9 |
| 78 |
|
|
|
| 79 |
|
|
* Wed Dec 18 2013 Daniel Berteaud <daniel@firewall-services.com> - 0.1.3-1.sme |
| 80 |
|
|
- Fix port, which was incorrectly set to proto |
| 81 |
|
|
|
| 82 |
|
|
* Tue Nov 19 2013 Daniel Berteaud <daniel@firewall-services.com> - 0.1.2-1.sme |
| 83 |
|
|
- Create the DB entries in one transaction to reduce the amount of log |
| 84 |
|
|
for each ban |
| 85 |
|
|
|
| 86 |
|
|
* Thu Jul 4 2013 Daniel Berteaud <daniel@firewall-services.com> - 0.1.1-1.sme |
| 87 |
|
|
- Fix service name for LemonLDAP::NG |
| 88 |
|
|
|
| 89 |
|
|
* Tue May 14 2013 Daniel Berteaud <daniel@firewall-services.com> - 0.1.0-1.sme |
| 90 |
|
|
- initial release |
| 91 |
|
|
|
| 92 |
|
|
%prep |
| 93 |
|
|
%setup -q -n %{name}-%{version} |
| 94 |
|
|
|
| 95 |
|
|
%build |
| 96 |
|
|
%{__mkdir_p} root/var/log/fail2ban |
| 97 |
|
|
perl createlinks |
| 98 |
|
|
|
| 99 |
|
|
%install |
| 100 |
|
|
/bin/rm -rf $RPM_BUILD_ROOT |
| 101 |
|
|
(cd root ; /usr/bin/find . -depth -print | /bin/cpio -dump $RPM_BUILD_ROOT) |
| 102 |
|
|
/bin/rm -f %{name}-%{version}-filelist |
| 103 |
|
|
/sbin/e-smith/genfilelist $RPM_BUILD_ROOT \ |
| 104 |
|
|
--dir /var/log/fail2ban 'attr(0750,root,root)' \ |
| 105 |
|
|
--file /var/log/fail2ban/daemon.log 'config(noreplace) %attr(0600,root,root)' \ |
| 106 |
|
|
--file /etc/cron.daily/cleanup_fail2ban 'attr(0755,root,root)' \ |
| 107 |
|
|
--file /etc/fail2ban/filter.d/apache-auth.local 'config(noreplace) %attr(0644,root,root)' \ |
| 108 |
|
|
> %{name}-%{version}-filelist |
| 109 |
|
|
|
| 110 |
|
|
%files -f %{name}-%{version}-filelist |
| 111 |
|
|
%defattr(-,root,root) |
| 112 |
|
|
|
| 113 |
|
|
%clean |
| 114 |
|
|
rm -rf $RPM_BUILD_ROOT |
| 115 |
|
|
|
| 116 |
|
|
%post |
| 117 |
|
|
|
| 118 |
|
|
%preun |
| 119 |
|
|
|
Parent Directory
| 
Revision Log
| 
Revision Graph
