/etc/init.d/fail2ban

fail2ban.initd (text/plain), 1.49 KB, created by mike on 2015-01-03 23:52:20 UTC

#!/sbin/runscript
# Copyright 1999-2015 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header: $

extra_commands="dumpcfg"
extra_started_commands="reload short detailed"

description="Scans log files and bans IPs that show malicious signs"
description_dumpcfg="dump configuration. For debugging"
description_reload="reloads the configuration"
description_short="short status"
description_detailed="detailed status about all jails"

: ${pidfile:=/run/fail2ban/fail2ban.pid}
: ${FAIL2BAN_SOCKFILE:=/run/fail2ban/fail2ban.sock}
: ${FAIL2BAN_CONFDIR:=/etc/fail2ban}
FAIL2BAN_OPTIONS="-c '${FAIL2BAN_CONFDIR}' -s '${FAIL2BAN_SOCKFILE}' -p '${pidfile}'"

required_files="${FAIL2BAN_CONFDIR}/fail2ban.conf"
command="/usr/bin/fail2ban-client"
command_args="${FAIL2BAN_OPTIONS} -b -x start"

depend() {
    need net logger iptables
}

start_pre() {
    mkdir -p "$(dirname "${pidfile}")" "$(dirname "${FAIL2BAN_SOCKFILE}")"
}

stop() {
    ebegin "Stopping fail2ban"
    eval ${command} ${FAIL2BAN_OPTIONS} stop
    eend $? "Failed to stop fail2ban"
}

reload() {
    ebegin "Reloading fail2ban"
    eval ${command} ${FAIL2BAN_OPTIONS} reload
    eend $? "Failed to reload fail2ban"
}

dumpcfg(){
    eval ${command} ${FAIL2BAN_OPTIONS} -d
}

short(){
    LANG= eval ${command} ${FAIL2BAN_OPTIONS} status
}

detailed(){
    local _j
    for _j in $(short | sed -e 's/,//g' -nre 's/\S\S Jail list:[[:space:]]+(.*)$/\1/p'); do
        eval ${command} ${FAIL2BAN_OPTIONS} status $_j
    done
}