forked from pool/fail2ban
0b091513f7
- Update to 0.11.1:
* Increment ban time (+ observer) functionality introduced.
* Database functionality extended with bad ips.
* New tags (usable in actions):
- `<bancount>` - ban count of this offender if known as bad
(started by 1 for unknown)
- `<bantime>` - current ban-time of the ticket
(prolongation can be retarded up to 10 sec.)
* Introduced new action command `actionprolong` to prolong ban-time
(e. g. set new timeout if expected);
* algorithm of restore current bans after restart changed:
update the restored ban-time (and therefore
end of ban) of the ticket with ban-time of jail (as maximum),
for all tickets with ban-time greater (or persistent)
* added new setup-option `--without-tests` to skip building
and installing of tests files (gh-2287).
* added new command `fail2ban-client get <JAIL> banip ?sep-char|--with-time?`
to get the banned ip addresses (gh-1916).
* purge database will be executed now (within observer).
restoring currently banned ip after service restart fixed
(now < timeofban + bantime), ignore old log failures (already banned)
* upgrade database: update new created table `bips` with entries
from table `bans` (allows restore current bans after
upgrade from version <= 0.10)
OBS-URL: https://build.opensuse.org/request/show/807912
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=100
24 lines
959 B
Diff
24 lines
959 B
Diff
--- a/files/fail2ban.service.in 2020-01-11 11:01:00.000000000 +0100
|
|
+++ b/files/fail2ban.service.in 2020-05-21 09:48:12.049645909 +0200
|
|
@@ -6,13 +6,14 @@
|
|
|
|
[Service]
|
|
Type=simple
|
|
-ExecStartPre=/bin/mkdir -p /run/fail2ban
|
|
-ExecStart=@BINDIR@/fail2ban-server -xf start
|
|
+EnvironmentFile=-/etc/sysconfig/fail2ban
|
|
+ExecStartPre=/bin/mkdir -p /var/run/fail2ban
|
|
+ExecStart=/usr/bin/fail2ban-server -xf $FAIL2BAN_OPTIONS start
|
|
# if should be logged in systemd journal, use following line or set logtarget to sysout in fail2ban.local
|
|
-# ExecStart=@BINDIR@/fail2ban-server -xf --logtarget=sysout start
|
|
-ExecStop=@BINDIR@/fail2ban-client stop
|
|
-ExecReload=@BINDIR@/fail2ban-client reload
|
|
-PIDFile=/run/fail2ban/fail2ban.pid
|
|
+# ExecStart=/usr/bin/fail2ban-server -xf --logtarget=sysout start
|
|
+ExecStop=/usr/bin/fail2ban-client stop
|
|
+ExecReload=/usr/bin/fail2ban-client reload
|
|
+PIDFile=/var/run/fail2ban/fail2ban.pid
|
|
Restart=on-failure
|
|
RestartPreventExitStatus=0 255
|
|
|