-
Notifications
You must be signed in to change notification settings - Fork 13
/
nethserver-fail2ban.spec
383 lines (280 loc) · 16.1 KB
/
nethserver-fail2ban.spec
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
Summary: NethServer configuration for fail2ban
Name: nethserver-fail2ban
Version: 1.7.3
Release: 1%{?dist}
License: GPL
Source: %{name}-%{version}.tar.gz
Source1: %{name}-cockpit.tar.gz
BuildArch: noarch
URL: http://dev.nethserver.org/projects/nethforge/wiki/%{name}
BuildRequires: nethserver-devtools
Requires: fail2ban >= 0.10.4
Requires: fail2ban-shorewall perl-Email-Valid
#AutoReq: no
%description
NethServer configuration for fail2ban
%prep
%setup
%post
%preun
%build
%{makedocs}
perl createlinks
sed -i 's/_RELEASE_/%{version}/' %{name}.json
# move Fail2Ban library
mkdir -p root%{perl_vendorlib}
mv -v lib/perl/NethServer root%{perl_vendorlib}
%install
rm -rf $RPM_BUILD_ROOT
(cd root ; find . -depth -print | cpio -dump $RPM_BUILD_ROOT)
mkdir -p %{buildroot}/usr/share/cockpit/%{name}/
mkdir -p %{buildroot}/usr/share/cockpit/nethserver/applications/
mkdir -p %{buildroot}/usr/libexec/nethserver/api/%{name}/
tar xvf %{SOURCE1} -C %{buildroot}/usr/share/cockpit/%{name}/
cp -a %{name}.json %{buildroot}/usr/share/cockpit/nethserver/applications/
cp -a api/* %{buildroot}/usr/libexec/nethserver/api/%{name}/
chmod +x %{buildroot}/usr/libexec/nethserver/api/%{name}/*
%{__mkdir_p} -p $RPM_BUILD_ROOT/var/run/fail2ban
%{genfilelist} %{buildroot} \
--file /usr/libexec/nethserver/fail2ban-status 'attr(0755,root,root)' \
--file /usr/bin/fail2ban-listban 'attr(0750,root,root)' \
--file /etc/cron.monthly/nethserver-fail2ban-vacuum 'attr(0750,root,root)' \
--file /usr/bin/fail2ban-unban 'attr(0750,root,root)' \
--file /usr/libexec/nethserver/fail2ban-listban 'attr(0755,root,root)' \
--file /usr/libexec/nethserver/fail2ban-listip 'attr(0755,root,root)' \
--file /usr/libexec/nethserver/fail2ban-statistics 'attr(0750,root,root)' \
--file /usr/libexec/nethserver/fail2ban-ipset-destroy 'attr(0750,root,root)' \
--file /etc/sudoers.d/50_nsapi_nethserver_fail2ban 'attr(0440,root,root)' \
$RPM_BUILD_ROOT > e-smith-%{version}-filelist
%clean
rm -rf $RPM_BUILD_ROOT
%files -f e-smith-%{version}-filelist
%defattr(-,root,root)
%doc COPYING
%dir %{_nseventsdir}/%{name}-update
%config(noreplace) /etc/fail2ban/filter.d/urbackup-auth.conf
%config(noreplace) /etc/fail2ban/filter.d/mattermost.conf
%config(noreplace) /etc/fail2ban/filter.d/apache-scan.conf
%config(noreplace) /etc/fail2ban/filter.d/asterisk_nethserver.conf
%config(noreplace) /etc/fail2ban/filter.d/dovecot-nethserver.conf
%config(noreplace) /etc/fail2ban/filter.d/httpd-admin.conf
%config(noreplace) /etc/fail2ban/filter.d/nextcloud-auth.conf
%config(noreplace) /etc/fail2ban/filter.d/openvpn.conf
%config(noreplace) /etc/fail2ban/filter.d/owncloud-auth.conf
%config(noreplace) /etc/fail2ban/filter.d/pam-generic-nethserver.conf
%config(noreplace) /etc/fail2ban/filter.d/phpmyadmin.conf
%config(noreplace) /etc/fail2ban/filter.d/postfix-ddos.conf
%config(noreplace) /etc/fail2ban/filter.d/postfix-sasl-abuse.conf
%config(noreplace) /etc/fail2ban/filter.d/rspamd.conf
%changelog
* Fri Dec 03 2021 Giacomo Sanchietti <giacomo.sanchietti@nethesis.it> - 1.7.3-1
- Shorewall doesn't start after fail2ban install - Bug NethServer/dev#6608
* Tue Nov 30 2021 Giacomo Sanchietti <giacomo.sanchietti@nethesis.it> - 1.7.2-1
- Fail2Ban: Shorewall doesn't block IP banned by asterisk jail - Bug NethServer/dev#6605
* Tue Jun 22 2021 Giacomo Sanchietti <giacomo.sanchietti@nethesis.it> - 1.7.1-1
- Cockpit applications: honor URLs inside manifest (2) - NethServer/dev#6530
* Fri Apr 23 2021 Giacomo Sanchietti <giacomo.sanchietti@nethesis.it> - 1.7.0-1
- Fail2ban: Whitelist hosts by FQDN or domain name - NethServer/dev#6491
* Mon Apr 19 2021 Giacomo Sanchietti <giacomo.sanchietti@nethesis.it> - 1.6.0-1
- Webtop: New jail from webtop_auth.log - NethServer/dev#6486
* Wed Mar 31 2021 Giacomo Sanchietti <giacomo.sanchietti@nethesis.it> - 1.5.8-1
- Fail2ban: Loglevel is not set, debug is available in UI - Bug NethServer/dev#6470
* Fri Dec 18 2020 Giacomo Sanchietti <giacomo.sanchietti@nethesis.it> - 1.5.7-1
- Fail2ban: Clean obsolete fail2ban esmith database - NethServer/dev#6370
* Wed Nov 25 2020 Giacomo Sanchietti <giacomo.sanchietti@nethesis.it> - 1.5.6-1
- Access web applications from port 980 - NethServer/dev#6344
* Wed Nov 18 2020 Giacomo Sanchietti <giacomo.sanchietti@nethesis.it> - 1.5.5-1
- New NethServer 7.9.2009 defaults - NethServer/dev#6320
* Mon Nov 02 2020 Giacomo Sanchietti <giacomo.sanchietti@nethesis.it> - 1.5.4-1
- Fail2ban dashboard needs to be scrolled - NethServer/dev#6317
* Mon Oct 12 2020 Giacomo Sanchietti <giacomo.sanchietti@nethesis.it> - 1.5.3-1
- Fail2ban: Whitelist network - NethServer/dev#6301
* Thu Oct 01 2020 Giacomo Sanchietti <giacomo.sanchietti@nethesis.it> - 1.5.2-1
- Fail2ban: Vacuum the sqlite database each month - NethServer/dev#6291
* Tue Sep 29 2020 Giacomo Sanchietti <giacomo.sanchietti@nethesis.it> - 1.5.1-1
- Fail2ban: Clean the sqlite database - NethServer/dev#6285
* Thu Sep 17 2020 Giacomo Sanchietti <giacomo.sanchietti@nethesis.it> - 1.5.0-1
- Fail2ban: perpetual recidive jail is broken - Bug NethServer/dev#6265
* Thu Sep 03 2020 Giacomo Sanchietti <giacomo.sanchietti@nethesis.it> - 1.4.2-1
- Fail2ban: Error: database is locked - Bug NethServer/dev#6253
* Thu Jul 02 2020 Giacomo Sanchietti <giacomo.sanchietti@nethesis.it> - 1.4.1-1
- Human readable numbers in Cockpit dashboards - NethServer/dev#6206
* Thu May 07 2020 Giacomo Sanchietti <giacomo.sanchietti@nethesis.it> - 1.4.0-1
- Fail2ban: Protect mattermost with a Jail - NethServer/dev#6150
* Tue Mar 10 2020 Giacomo Sanchietti <giacomo.sanchietti@nethesis.it> - 1.3.7-1
- Fail2ban: 'Hash is full, cannot add more elements' - NethServer/dev#6071
* Tue Feb 11 2020 Giacomo Sanchietti <giacomo.sanchietti@nethesis.it> - 1.3.6-1
- Fail2ban: Jails postfix-sasl and postfix-rbl have been removed - Bug NethServer/dev#6053
* Sun Feb 02 2020 Stephane de Labrusse <stephdl@de-labrusse.fr> - 1.3.5-1
- Fail2ban: The service is disabled when the jail is enabled/disabled - Bug NethServer/dev#6044
* Thu Jan 30 2020 Giacomo Sanchietti <giacomo.sanchietti@nethesis.it> - 1.3.4-1
- Fail2ban: shorewall must restart before Fail2ban - Bug NethServer/dev#6040
* Wed Jan 08 2020 Giacomo Sanchietti <giacomo.sanchietti@nethesis.it> - 1.3.3-1
- Cockpit: improve fail2ban logs view - NethServer/dev#6005
- Cockpit: change package Dashboard page title - NethServer/dev#6004
* Thu Dec 05 2019 Giacomo Sanchietti <giacomo.sanchietti@nethesis.it> - 1.3.2-1
- Fail2ban: Display the date of the last statistic update - NethServer/dev#5978
* Tue Dec 03 2019 Giacomo Sanchietti <giacomo.sanchietti@nethesis.it> - 1.3.1-1
- fail2ban-unban is back - NethServer/dev#5973
* Mon Dec 02 2019 Giacomo Sanchietti <giacomo.sanchietti@nethesis.it> - 1.3.0-1
- Fail2ban: Upgrade to fail2ban-0.10 - NethServer/dev#5943
* Tue Nov 12 2019 Giacomo Sanchietti <giacomo.sanchietti@nethesis.it> - 1.2.1-1
- Fail2ban: jail names are translated - Bug NethServer/dev#5900
- Fail2ban: checkbox settings not saved with good values - Bug NethServer/dev#5905
* Tue Oct 01 2019 Giacomo Sanchietti <giacomo.sanchietti@nethesis.it> - 1.2.0-1
- Fail2ban: asterisk jail is always sending email - Bug NethServer/dev#5829
- Fail2ban: unknow sip login not banned (asterisk) - Bug NethServer/dev#5849
* Mon Sep 16 2019 Stephane de Labrusse <stephdl@de-labrusse.fr> - 1.1.10-1
- Fail2ban: asterisk jail is always sending email - Bug NethServer/dev#5829
* Tue Sep 03 2019 Giacomo Sanchietti <giacomo.sanchietti@nethesis.it> - 1.1.9-1
- Cockpit. List correct application version - Nethserver/dev#5819
* Tue Aug 27 2019 Giacomo Sanchietti <giacomo.sanchietti@nethesis.it> - 1.1.8-1
- Fail2ban: IP are unbanned but still listed in json database - Bug NethServer/dev#5808
* Tue May 28 2019 Giacomo Sanchietti <giacomo.sanchietti@nethesis.it> - 1.1.7-1
- fail2ban not banning when fail2ban.json is corrupt - Bug NethServer/dev#5759
* Mon May 06 2019 Stephane de Labrusse <stephdl@de-labrusse.fr> - 1.1.6-1
- Release of the cockpit UI for Fail2ban dev#5745
* Tue Mar 26 2019 Giacomo Sanchietti <giacomo.sanchietti@nethesis.it> - 1.1.5-1
- fail2ban postfix-sasl-abuse not firing - Bug NethServer/dev#5737
* Mon Feb 11 2019 Stephane de Labrusse <stephdl@de-labrusse.fr> - 1.1.4-1
- Asterisk jail does not protect asterisk manager interface - NethServer/dev#5703
* Tue Jan 29 2019 Stephane de Labrusse <stephdl@de-labrusse.fr> - 1.1.3-1
- Roundcubemail Jail prevents Fail2ban to start - Bug NethServer/dev#5693
* Fri Dec 07 2018 Giacomo Sanchietti <giacomo.sanchietti@nethesis.it> - 1.1.2-1
- Fail2ban: Create a jail for the rspamd UI - NethServer/dev#5663
* Tue Nov 20 2018 Giacomo Sanchietti <giacomo.sanchietti@nethesis.it> - 1.1.1-1
- Fail2ban: CustomDestemail is set by a migrate fragment - Bug NethServer/dev#5643
* Thu Nov 08 2018 Giacomo Sanchietti <giacomo.sanchietti@nethesis.it> - 1.1.0-1
- Fail2ban: Unban enhancement - NethServer/dev#5620
- Fail2ban: Postfix sasl jails - NethServer/dev#5618
- Fail2ban: move from esmith API to json file - NethServer/dev#5621
* Tue Oct 30 2018 Giacomo Sanchietti <giacomo.sanchietti@nethesis.it> - 1.0.8-1
- Fail2ban: Webtop Jail - NethServer/dev#5612
- Fail2ban timed out after 60 seconds - Bug NethServer/dev#5599
* Fri Sep 28 2018 Giacomo Sanchietti <giacomo.sanchietti@nethesis.it> - 1.0.7-1
- Wrong error path for the roundcubemail log - Bug NethServer/dev#5592
* Tue Sep 25 2018 Giacomo Sanchietti <giacomo.sanchietti@nethesis.it> - 1.0.6-1
- Fail2Ban: asterisk notification always enabled - Bug NethServer/dev#5586
* Mon Aug 13 2018 Stephane de Labrusse <stephdl@de-labrusse.fr> - 1.0.5-1
- Fail2ban: Status section to display statistics - NethServer/dev#5546
- Asterisk jail for fail2ban - NethServer/dev#5543
- Fail2ban triggers backup-config run every night - NethServer/dev#5565
* Fri Jun 08 2018 Stephane de Labrusse <stephdl@de-labrusse.fr> - 1.0.4-1
- Fail2ban: do not start a jail when the log is missing - Bug NethServer/dev#5518
* Sun May 27 2018 Stephane de Labrusse <stephdl@de-labrusse.fr> - 1.0.3-1
- Blank Dashboard after updates - Bug NethServer/dev#5508
- Code from dnutan
* Fri May 25 2018 Stephane de Labrusse <stephdl@de-labrusse.fr> - 1.0.2-1
- Fail2ban dies if ban/unban is impossible.
- IP Key suppression and unban if ban counter is > 2
* Tue May 15 2018 Stephane de Labrusse <stephdl@de-labrusse.fr> - 1.0.1-1
- Remove the define settings in spec file
* Tue May 15 2018 Stephane de Labrusse <stephdl@de-labrusse.fr> - 1.0.0-1
- Fail2Ban: collect statistics of permanent jail ban - NethServer/dev#5480
- Fail2Ban: dovecot brute force attack not recognized - Bug NethServer/dev#5481
- Fail2ban: Documentation and Travis code - NethServer/dev#5489
* Sat Apr 07 2018 Stephane de Labrusse <stephdl@de-labrusse.fr> 0.1.37-1.ns7
- recidive jail delete the esmith key
* Wed Feb 28 2018 Stephane de Labrusse <stephdl@de-labrusse.fr> 0.1.36-1.ns7
- fail2ban database to fix the recidive unban issue
- fix typo for whitelisting and email address
* Mon Feb 26 2018 Stephane de Labrusse <stephdl@de-labrusse.fr> 0.1.35-1.ns7
- Back to shorewall
* Sun Feb 25 2018 Stephane de Labrusse <stephdl@de-labrusse.fr> 0.1.34-1.ns7
- Recidive jail can be perpetual
* Sun Feb 25 2018 Stephane de Labrusse <stephdl@de-labrusse.fr> 0.1.32-1.ns7
- Use iptables for banAction instead of shorewall
* Thu Feb 15 2018 Stephane de Labrusse <stephdl@de-labrusse.fr> 0.1.31-1.ns7
- relax nethserver-dovecot about 'Disconnected (auth failed'
* Sat Jan 20 2018 Stephane de Labrusse <stephdl@de-labrusse.fr> 0.1.30-1.ns7
- nethserver-dovecot jail less restrictive for 'Disconnected' regex
* Fri Dec 08 2017 Stephane de Labrusse <stephdl@de-labrusse.fr> 0.1.29-1.ns7
- Button creation to restart fail2ban in the gui
* Sat Nov 11 2017 Stephane de Labrusse <stephdl@de-labrusse.fr> 0.1.28-1.ns7
- Validate the content of IgnoreIP & CustomDestemail in nethgui
* Sun Nov 05 2017 Stephane de Labrusse <stephdl@de-labrusse.fr> 0.1.27-1.ns7
- template of /etc/logrotate.d/fail2ban
* Thu Nov 02 2017 Stephane de Labrusse <stephdl@de-labrusse.fr> 0.1.26-1.ns7
- Revert the wildcard 0.1.25-1.ns7
- restart fail2ban on trusted network expand
* Thu Oct 19 2017 Stephane de Labrusse <stephdl@de-labrusse.fr> 0.1.25-1.ns7
- Restart fail2ban service on trusted-network
- back to the * wildcard
- reload the fail2ban configuration when logrotate
* Sun Sep 10 2017 Stephane de Labrusse <stephdl@de-labrusse.fr> 0.1.24-1.ns7
- Restart httpd service on trusted-network
* Sat Aug 19 2017 Stephane de Labrusse <stephdl@de-labrusse.fr> 0.1.23-1.ns7
- escape path file for sogo jail , code from phonon112358
* Fri Jul 28 2017 Stephane de Labrusse <stephdl@de-labrusse.fr> 0.1.22-1.ns7
- Start sogo jail if the log exists
* Tue Jul 18 2017 Stephane de Labrusse <stephdl@de-labrusse.fr> 0.1.21-1.ns7
- Fix variable error on owncloud jail
* Sat Jul 15 2017 Stephane de Labrusse <stephdl@de-labrusse.fr> 0.1.20-1.ns7
- Custom MaxRetry property per jail (only by db)
- Remove MaxRetry recidive listed twice
* Thu Jun 29 2017 Stephane de Labrusse <stephdl@de-labrusse.fr> 0.1.18-1.ns7
- Add translation description
* Thu Jun 22 2017 Stephane de Labrusse <stephdl@de-labrusse.fr> 0.1.17-1.ns7
- Removed the wildcard on watched log files
* Thu Jun 22 2017 Stephane de Labrusse <stephdl@de-labrusse.fr> 0.1.16-1.ns7
- Test if the fail2ban log exists for recidive jail
* Mon Jun 12 2017 Stephane de Labrusse <stephdl@de-labrusse.fr> 0.1.15-1.ns7
- Stop to send notifications on start/stop jails
- UI tweaks
- Code from dnutan <dnutan@openaliasbox.org>
* Fri Jun 09 2017 Stephane de Labrusse <stephdl@de-labrusse.fr> 0.1.14-1.ns7
- Test if the dovecot log exists before to start the dovecot/sieve jails
* Wed May 03 2017 Stephane de Labrusse <stephdl@de-labrusse.fr> 0.1.13-1-ns7
- postfix-ddos jail updated
* Tue May 02 2017 Stephane de Labrusse <stephdl@de-labrusse.fr> 0.1.12-1-ns7
- Added postfix-ddos jail
- Added dovecot-nethserver Jail
- Added pam-generic-nethserver jail
* Mon May 01 2017 Stephane de Labrusse <stephdl@de-labrusse.fr> 0.1.11-1-ns7
- adjusted log file and backend in jail
* Mon May 01 2017 Stephane de Labrusse <stephdl@de-labrusse.fr> 0.1.10-1-ns7
- Added custom regex against dovecot and pam-generic
- pam-generic.local & dovecot.local
* Wed Mar 29 2017 Stephane de Labrusse <stephdl@de-labrusse.fr> 0.1.9-1-ns7
- Template expansion on trusted-network
* Sun Mar 12 2017 Stephane de Labrusse <stephdl@de-labrusse.fr> 0.1.8-2-ns7
- Added OPENVPN Jail
- Enforce the MaxRetry setting
* Sun Mar 12 2017 Stephane de Labrusse <stephdl@de-labrusse.fr> 0.1.7-2-ns7
- GPL license
* Mon Feb 27 2017 Stephane de Labrusse <stephdl@de-labrusse.fr> - 0.1.7-1-ns7
- added phpmyadmin jail
* Mon Feb 27 2017 Stephane de Labrusse <stephdl@de-labrusse.fr> - 0.1.6-1-ns7
- added wildcard in httpd log
* Fri Feb 24 2017 Stephane de Labrusse <stephdl@de-labrusse.fr> - 0.1.5-1-ns7
- Corrected the email recipient
* Mon Feb 20 2017 Stephane de Labrusse <stephdl@de-labrusse.fr> - 0.1.4-1-ns7
- Handle the log rotation by wildcard
- Create /var/run/fail2ban
* Tue Jan 31 2017 Stephane de Labrusse <stephdl@de-labrusse.fr> - 0.1.3-2-ns7
- Firewalld is stopped and disabled in %pre
* Wed Nov 23 2016 Stephane de Labrusse <stephdl@de-labrusse.fr> - 0.1.3-1-ns7
- urbackup jail is templated now
* Mon Nov 21 2016 Stephane de Labrusse <stephdl@de-labrusse.fr> - 0.1.2-1-ns7
- Urbackup Jail created
* Sun Nov 6 2016 Stephane de Labrusse <stephdl@de-labrusse.fr> - 0.1.1-1-ns7
- Nextcloud jail created
* Sun Nov 6 2016 Stephane de Labrusse <stephdl@de-labrusse.fr> - 0.1.0-1-ns7
- NS7 adaptation
* Tue Mar 8 2016 Stephane de Labrusse <stephdl@de-labrusse.fr> - 0.0.7-ns6
- Owncloud Jail created
* Tue Mar 8 2016 Stephane de Labrusse <stephdl@de-labrusse.fr> - 0.0.7-ns6
- Owncloud Jail created
* Sat Mar 5 2016 Stephane de Labrusse <stephdl@de-labrusse.fr> - 0.0.6-ns6
- Fail2ban panel uses Tab now
- Blacklist tab created with Unban Input Box
* Sat Feb 20 2016 Stephane de Labrusse <stephdl@de-labrusse.fr> - 0.0.5-ns6
- New jail against bad authentication to httpd-admin
- Help page created
- Enhancement of the jail status with expandable menu.
* Thu Jan 28 2016 Stephane de Labrusse <stephdl@de-labrusse.fr> - 0.0.4-ns6
- WebUI enhanced
* Wed Jan 27 2016 Stephane de Labrusse <stephdl@de-labrusse.fr> - 0.0.3-ns6
- WebUI designed
* Wed Dec 02 2015 Stephane de Labrusse <stephdl@de-labrusse.fr> - 0.0.2-ns6
- Initial release