mirror of
https://github.com/fail2ban/fail2ban.git
synced 2026-03-11 08:55:31 +00:00
af24c52558
Our OpenRC service script contained a "need logger" dependency, which
meant that the life cycle of the fail2ban service was tied to that of
the system logger service. That isn't quite correct: fail2ban
functions fine even if the system logger is stopped:
1. fail2ban is capable of analyzing non-syslog log files.
2. Even if fail2ban is solely analyzing syslog files, we don't
want to stop the fail2ban service simply because syslog was
stopped -- fail2ban just won't see any new log lines until
syslog is started again.
This commit changes the "need net" dependency to "use net", which will
still attempt to start the system logger service, but which won't kill
fail2ban if the system logger is ever stopped.
59 lines
1.7 KiB
Text
Executable file
59 lines
1.7 KiB
Text
Executable file
#!/sbin/openrc-run
|
|
# This file is part of Fail2Ban.
|
|
#
|
|
# Fail2Ban is free software; you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation; either version 2 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# Fail2Ban is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with Fail2Ban; if not, write to the Free Software
|
|
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
|
|
#
|
|
# Author: Sireyessire, Cyril Jaquier
|
|
#
|
|
|
|
description="Daemon to ban hosts that cause multiple authentication errors"
|
|
description_reload="reload configuration"
|
|
description_showlog="show fail2ban logs"
|
|
extra_started_commands="reload showlog"
|
|
|
|
FAIL2BAN="/usr/bin/fail2ban-client ${FAIL2BAN_OPTIONS}"
|
|
|
|
depend() {
|
|
use logger
|
|
after iptables
|
|
}
|
|
|
|
start() {
|
|
ebegin "Starting fail2ban"
|
|
mkdir -p /var/run/fail2ban || return 1
|
|
# remove stalled sock file after system crash
|
|
# bug 347477
|
|
rm -f /var/run/fail2ban/fail2ban.sock || return 1
|
|
start-stop-daemon --start --pidfile /var/run/fail2ban/fail2ban.pid \
|
|
-- ${FAIL2BAN} start
|
|
eend $? "Failed to start fail2ban"
|
|
}
|
|
|
|
stop() {
|
|
ebegin "Stopping fail2ban"
|
|
start-stop-daemon --stop --pidfile /var/run/fail2ban/fail2ban.pid --retry 30 \
|
|
-- ${FAIL2BAN} stop
|
|
eend $? "Failed to stop fail2ban"
|
|
}
|
|
|
|
reload() {
|
|
ebegin "Reloading fail2ban"
|
|
${FAIL2BAN} reload
|
|
eend $? "Failed to reload fail2ban"
|
|
}
|
|
|
|
showlog(){
|
|
less /var/log/fail2ban.log
|
|
}
|