diff --git a/configs/conf-available/20-jail-dovecot.conf.in b/configs/conf-available/20-jail-dovecot.conf.in new file mode 100644 index 0000000..5180e35 --- /dev/null +++ b/configs/conf-available/20-jail-dovecot.conf.in @@ -0,0 +1,3 @@ +[jail:dovecot] +source = files:/var/log/mail.log +filter = preg:${CMAKE_INSTALL_FULL_DATAROOTDIR}/f2b/filters/dovecot.preg diff --git a/configs/conf-available/20-jail-nginx.conf.in b/configs/conf-available/20-jail-nginx.conf.in new file mode 100644 index 0000000..1154ac7 --- /dev/null +++ b/configs/conf-available/20-jail-nginx.conf.in @@ -0,0 +1,3 @@ +[jail:nginx] +source = files:/var/log/nginx/*access*.log +filter = pcre:${CMAKE_INSTALL_FULL_DATAROOTDIR}/f2b/filters/nginx-bots.pcre diff --git a/configs/conf-available/20-jail-postfix.conf.in b/configs/conf-available/20-jail-postfix.conf.in new file mode 100644 index 0000000..8bfdfc1 --- /dev/null +++ b/configs/conf-available/20-jail-postfix.conf.in @@ -0,0 +1,3 @@ +[jail:postfix] +source = files:/var/log/mail.log +filter = preg:${CMAKE_INSTALL_FULL_DATAROOTDIR}/f2b/filters/postfix.preg diff --git a/configs/conf-available/20-jail-ssh.conf.in b/configs/conf-available/20-jail-ssh.conf.in new file mode 100644 index 0000000..2d22814 --- /dev/null +++ b/configs/conf-available/20-jail-ssh.conf.in @@ -0,0 +1,3 @@ +[jail:ssh] +source = files:/var/log/auth.log +filter = preg:${CMAKE_INSTALL_FULL_DATAROOTDIR}/f2b/filters/ssh.preg diff --git a/configs/f2b.conf.in b/configs/f2b.conf.in index 02448aa..3a7e36f 100644 --- a/configs/f2b.conf.in +++ b/configs/f2b.conf.in @@ -30,7 +30,3 @@ listen = unix:/var/run/f2b.sock ; auth used only for 'inet' connections ; if password not set - it will be generated on each restart, see logs ;password = - -[jail:ssh] -source = files:/var/log/auth.log -filter = preg:${CMAKE_INSTALL_FULL_DATAROOTDIR}/f2b/filters/ssh.preg diff --git a/debian/f2b.install b/debian/f2b.install index 2ae5d05..5cfe908 100644 --- a/debian/f2b.install +++ b/debian/f2b.install @@ -2,7 +2,7 @@ etc/f2b/conf-available/*-source-files.conf etc/f2b/conf-available/*-source-portknock.conf etc/f2b/conf-available/*-filter-preg.conf etc/f2b/conf-available/*-backend-exec-*.conf -etc/f2b/conf-available/*-jail-global.conf +etc/f2b/conf-available/*-jail-*.conf etc/f2b/conf-enabled etc/f2b/f2b.conf usr/bin/f2b-*-test