1 |
%define version 0.1.18 |
2 |
%define release 10 |
3 |
%define name smeserver-fail2ban |
4 |
|
5 |
|
6 |
Summary: fail2ban integration on SME Server |
7 |
Name: %{name} |
8 |
Version: %{version} |
9 |
Release: %{release}%{?dist} |
10 |
Epoch: 9 |
11 |
License: GPL |
12 |
Group: Networking/Daemons |
13 |
Source: %{name}-%{version}.tar.gz |
14 |
Patch0:smeserver-fail2ban-0.1.18.bz10767-adminpanel.patch |
15 |
Patch1: smeserver-fail2ban-0.1.18.bz9709-wordpress.patch |
16 |
Patch2: smeserver-fail2ban-0.1.18.bz10775-sfail2ban.patch |
17 |
Patch3: smeserver-fail2ban-0.1.18-locale-2019-05-15.patch |
18 |
Patch4: smeserver-fail2ban-0.1.18-bz10776-wordpress.patch |
19 |
Patch5: smeserver-fail2ban-0.1.18-bz9669-sogo.patch |
20 |
Patch6: smeserver-fail2ban-0.1.18-bz10814-denylist-display.patch |
21 |
Patch7: smeserver-fail2ban-0.1.18-bz10817-configure.patch |
22 |
Patch8: smeserver-fail2ban-0.1.18.bz10839.patch |
23 |
Patch9: smeserver-fail2ban-0.1.18.bz10370.patch |
24 |
|
25 |
BuildRoot: /var/tmp/%{name}-%{version}-%{release}-buildroot |
26 |
BuildArchitectures: noarch |
27 |
BuildRequires: e-smith-devtools |
28 |
|
29 |
Requires: e-smith-base >= 5.2.0 |
30 |
Requires: fail2ban |
31 |
|
32 |
|
33 |
%description |
34 |
Configure fail2ban on SME Server |
35 |
|
36 |
%changelog |
37 |
* Wed Nov 27 2019 Jean-Philipe Pialasse <tests@pialasse.com> 0.1.18-10.sme |
38 |
- fix wordpress template error [SME: 10839] |
39 |
- rewrite rule for [SME: 9719] |
40 |
- add configurable values for recidive jail [SME: 10370] |
41 |
|
42 |
* Wed Oct 16 2019 Jean-Philipe Pialasse <tests@pialasse.com> 0.1.18-9.sme |
43 |
- propagate configuration changes to fail2ban after submiting changes [SME: 10817] |
44 |
|
45 |
* Wed Oct 16 2019 Jean-Philipe Pialasse <tests@pialasse.com> 0.1.18-8.sme |
46 |
- fix blocked hosts list not displaying unless smeserver-denyhosts also installed [SME: 10814] |
47 |
|
48 |
* Fri Jul 19 2019 Jean-Philipe Pialasse <tests@pialasse.com> 0.1.18-7.sme |
49 |
- prevent fail2ban failure if sogo not installed while a backup restored db entries [SME: 9669] |
50 |
|
51 |
* Mon Jun 03 2019 Jean-Philipe Pialasse <tests@pialasse.com> 0.1.18-6.sme |
52 |
- fix incorrect permissions on sfail2ban [SME: 10775] |
53 |
|
54 |
* Mon Jun 03 2019 Jean-Philipe Pialasse <tests@pialasse.com> 0.1.18-5.sme |
55 |
- fix wordpress fragment error preventing jail.conf to be updated [SME: 10776] |
56 |
|
57 |
* Tue May 14 2019 Jean-Philipe Pialasse <tests@pialasse.com> 0.1.18-4.sme |
58 |
- fix missing sfail2ban exec [SME: 10775] |
59 |
- Apply locals |
60 |
|
61 |
* Tue Apr 09 2019 Jean-Philipe Pialasse <tests@pialasse.com> 0.1.18-3.sme |
62 |
- add admin panel [SME: 10767] |
63 |
- add wordpress jails and filters [SME: 9709] |
64 |
|
65 |
* Fri Oct 27 2017 Daniel Berteaud <daniel@firewall-services.com> - 0.1.18-1.sme |
66 |
- Ignore greylisting, from Michael McCarn [SME: 10447] |
67 |
|
68 |
* Thu Nov 17 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.1.17-1.sme |
69 |
- Makes sur log files exist before resuming monitoring after a logrotate |
70 |
[SME: 9875] |
71 |
|
72 |
* Tue Aug 2 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.1.16-1.sme |
73 |
- Add a new prop (FilterValidRemoteHosts) to allow blacklisting of hosts allowed |
74 |
to access the server-manager |
75 |
- Ignore 0.0.0.0/0.0.0.0 by default [SME: 9719] |
76 |
|
77 |
* Tue Jul 5 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.1.15-1.sme |
78 |
- Fix compat with older qpsmtpd |
79 |
|
80 |
* Thu Jun 9 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.1.14-1.sme |
81 |
- Update regex for qpsmtpd 0.96 |
82 |
|
83 |
* Mon Feb 29 2016 Daniel Berteaud <daniel@firewall-services.com> - 0.1.13-1.sme |
84 |
- Ignore failure to get proxy.pac |
85 |
|
86 |
* Fri Jul 24 2015 Daniel Berteaud <daniel@firewall-services.com> - 0.1.12-1.sme |
87 |
- Updates for fail2ban 0.9.2 |
88 |
- Add more httpd jails |
89 |
- Switch to upstream Ejabberd filter |
90 |
|
91 |
* Wed Apr 15 2015 Daniel Berteaud <daniel@firewall-services.com> - 0.1.11-1.sme |
92 |
- Start fail2ban a bit later [SME: 8708] |
93 |
|
94 |
* Tue Jan 27 2015 Daniel Berteaud <daniel@firewall-services.com> - 0.1.10-1.sme |
95 |
- Suspend log monitoring during logrotate [SME: 8708] |
96 |
|
97 |
* Thu Jan 15 2015 Daniel Berteaud <daniel@firewall-services.com> - 0.1.9-1.sme |
98 |
- Fix LL::NG jail name |
99 |
|
100 |
* Wed Sep 17 2014 Daniel Berteaud <daniel@firewall-services.com> - 0.1.8-1.sme |
101 |
- Restart fail2ban during logrotate event so it re-open apache log file [SME: 8557] |
102 |
|
103 |
* Wed Jun 25 2014 Daniel Berteaud <daniel@firewall-services.com> - 0.1.7-1.sme |
104 |
- Correctly handle single IP in IgnoreIP prop |
105 |
|
106 |
* Tue Jun 24 2014 Daniel Berteaud <daniel@firewall-services.com> - 0.1.6-1.sme |
107 |
- Relax proxy regex so requests for proxy.pac aren't matched |
108 |
|
109 |
* Mon Jun 23 2014 Daniel Berteaud <daniel@firewall-services.com> - 0.1.5-1.sme |
110 |
- Pre-create the logfile so fail2ban can start the first time |
111 |
- Remove most warnings on startup |
112 |
|
113 |
* Wed Apr 23 2014 Daniel Berteaud <daniel@firewall-services.com> - 0.1.4-1.sme |
114 |
- New branch for SME9 |
115 |
- Remove sogo-auth.conf which is included in EL6 build of fail2ban |
116 |
>>>>>>> sme9 |
117 |
|
118 |
* Wed Dec 18 2013 Daniel Berteaud <daniel@firewall-services.com> - 0.1.3-1.sme |
119 |
- Fix port, which was incorrectly set to proto |
120 |
|
121 |
* Tue Nov 19 2013 Daniel Berteaud <daniel@firewall-services.com> - 0.1.2-1.sme |
122 |
- Create the DB entries in one transaction to reduce the amount of log |
123 |
for each ban |
124 |
|
125 |
* Thu Jul 4 2013 Daniel Berteaud <daniel@firewall-services.com> - 0.1.1-1.sme |
126 |
- Fix service name for LemonLDAP::NG |
127 |
|
128 |
* Tue May 14 2013 Daniel Berteaud <daniel@firewall-services.com> - 0.1.0-1.sme |
129 |
- initial release |
130 |
|
131 |
%prep |
132 |
%setup -q -n %{name}-%{version} |
133 |
%patch0 -p1 |
134 |
%patch1 -p1 |
135 |
%patch2 -p1 |
136 |
%patch3 -p1 |
137 |
%patch4 -p1 |
138 |
%patch5 -p1 |
139 |
%patch6 -p1 |
140 |
%patch7 -p1 |
141 |
%patch8 -p1 |
142 |
%patch9 -p1 |
143 |
|
144 |
%build |
145 |
%{__mkdir_p} root/var/log/fail2ban |
146 |
perl createlinks |
147 |
|
148 |
%install |
149 |
/bin/rm -rf $RPM_BUILD_ROOT |
150 |
(cd root ; /usr/bin/find . -depth -print | /bin/cpio -dump $RPM_BUILD_ROOT) |
151 |
/bin/rm -f %{name}-%{version}-filelist |
152 |
/sbin/e-smith/genfilelist $RPM_BUILD_ROOT \ |
153 |
--dir /var/log/fail2ban 'attr(0750,root,root)' \ |
154 |
--file /var/log/fail2ban/daemon.log 'config(noreplace) %attr(0600,root,root)' \ |
155 |
--file /etc/cron.daily/cleanup_fail2ban 'attr(0755,root,root)' \ |
156 |
--file /etc/fail2ban/filter.d/apache-auth.local 'config(noreplace) %attr(0644,root,root)' \ |
157 |
--file /usr/bin/sfail2ban 'attr(0755,root,root)' \ |
158 |
> %{name}-%{version}-filelist |
159 |
|
160 |
%files -f %{name}-%{version}-filelist |
161 |
%defattr(-,root,root) |
162 |
|
163 |
%clean |
164 |
rm -rf $RPM_BUILD_ROOT |
165 |
|
166 |
%post |
167 |
|
168 |
%preun |
169 |
|