diff options
| author | Jesse Luehrs <doy@tozt.net> | 2020-04-26 17:39:54 -0400 |
|---|---|---|
| committer | Jesse Luehrs <doy@tozt.net> | 2020-04-26 17:39:54 -0400 |
| commit | 63818aadb1a1f044f8af976943521e6c5a9889fb (patch) | |
| tree | 90ae2b57126bda2e6ac4f11a1972ccb4f7e3b27d /modules/fail2ban | |
| parent | 255662b31a48d13e20b9c90833ff2fdcbe58c5c9 (diff) | |
| download | puppet-tozt-63818aadb1a1f044f8af976943521e6c5a9889fb.tar.gz puppet-tozt-63818aadb1a1f044f8af976943521e6c5a9889fb.zip | |
add mailu fail2ban filter
Diffstat (limited to 'modules/fail2ban')
| -rw-r--r-- | modules/fail2ban/files/filter/mailu.conf | 2 | ||||
| -rw-r--r-- | modules/fail2ban/files/jail/mailu.conf | 3 | ||||
| -rw-r--r-- | modules/fail2ban/manifests/filter.pp | 14 |
3 files changed, 19 insertions, 0 deletions
diff --git a/modules/fail2ban/files/filter/mailu.conf b/modules/fail2ban/files/filter/mailu.conf new file mode 100644 index 0000000..b83feb3 --- /dev/null +++ b/modules/fail2ban/files/filter/mailu.conf @@ -0,0 +1,2 @@ +[Definition] +failregex = client login failed: "Authentication credentials invalid" while in http auth state, client: <HOST>, diff --git a/modules/fail2ban/files/jail/mailu.conf b/modules/fail2ban/files/jail/mailu.conf new file mode 100644 index 0000000..83ae9d8 --- /dev/null +++ b/modules/fail2ban/files/jail/mailu.conf @@ -0,0 +1,3 @@ +[mailu] +enabled = true +backend = systemd diff --git a/modules/fail2ban/manifests/filter.pp b/modules/fail2ban/manifests/filter.pp new file mode 100644 index 0000000..192f276 --- /dev/null +++ b/modules/fail2ban/manifests/filter.pp @@ -0,0 +1,14 @@ +define fail2ban::filter($source=undef) { + include fail2ban + + $_source = $source ? { + undef => "puppet:///modules/fail2ban/filter/${name}.conf", + default => $source, + } + + file { "/etc/fail2ban/filter.d/${name}.conf": + source => $_source, + require => Package["fail2ban"], + notify => Service["fail2ban"]; + } +} |