From 6d3c52a965a76256d1a721a9368c726959f53c5a Mon Sep 17 00:00:00 2001 From: Yaroslav Halchenko Date: Thu, 7 Dec 2006 23:10:30 +0000 Subject: [PATCH] slightly corrected description for interpolations/parameters --- debian/README.Debian | 25 +++++++++++++------------ debian/changelog | 10 +++++----- 2 files changed, 18 insertions(+), 17 deletions(-) diff --git a/debian/README.Debian b/debian/README.Debian index 072af3cf..bf323a00 100644 --- a/debian/README.Debian +++ b/debian/README.Debian @@ -37,18 +37,19 @@ NOTE: -e command line parameter is non existant in 0.7.x * Interpolations vs actions/filters parameters: -For details see #398739. -Summary: every pair of .conf and then .local (if exists) files read -separately from the others, so interpolations cannot penetrate from -(for instance) jail.* into actions.d/iptables.conf. To overcome this, -you are welcome to create/use any parameter which can be substituted -in actions/filters [Definition] section, whenever it is also defined -in the [Init] section of that file and used in place of necessary -placement as . Parameters can be specified in the -definitions within jail.{conf,local}. For instance 1 lengthy example, -where fwchain is both used as interpolation (in jail.local) and -parameter (in iptables-flex.local). +For details see #398739 or wait for a closure of #400416 + +Every pair of .conf and then .local (if exists) files is read +separately from any other configuration file, so interpolations cannot +penetrate from jail.* into actions.d/*. To overcome this, it is +necessary to create a PARAMETER which can be substituted in actions +[Definition] section, if it is also defined in the [Init] section of +that file and is used in place of necessary allocation as +tag. Parameters can be specified in the definitions within +jail.{conf,local}. For instance, 1 lengthy example, where the same +name "fwchain" is used both as interpolation (in jail.local) and as a +parameter (in iptables-flex.local) (from #398739) ==> /etc/fail2ban/jail.local <== [DEFAULT] @@ -199,4 +200,4 @@ P.S. Anyone is welcome to recommend proper security solution to this issue, such as an alternative to sysklogd which allows better control over users logging to specific facilities (such as AUTH) - -- Yaroslav O. Halchenko , Wed, 6 Dec 2006 22:56:20 -0500 + -- Yaroslav O. Halchenko , Thu, 7 Dec 2006 18:09:36 -0500 diff --git a/debian/changelog b/debian/changelog index 41d6638d..667c61cd 100644 --- a/debian/changelog +++ b/debian/changelog @@ -3,13 +3,13 @@ fail2ban (0.7.4-5) unstable; urgency=low * Added Suggests on mailx and relevant comments in README.Debian about invoking mail actions (closes: #396668) * Removed obsolete entries in TODO and README - * README.Debian describes a bit issue of interpolations vs parameters passed - from jail.{conf,local} into an action or a filter definition (closes: + * README.Debian describes the use of interpolations vs parameters passed + from jail.{conf,local} into an action definitions (closes: #398739) - * Initial version of postfix filter (closes: #377711) + * Initial version of postfix filter has been present in 0.7 (closes: + #377711) * Removed Uploaded field from control since I am a DD now. Big thanks to - Barak Pearlmutter for being the sponsor of my packages for few - years. + Barak Pearlmutter for being the sponsor of my packages for few years. -- Yaroslav O. Halchenko Wed, 6 Dec 2006 22:14:26 -0500