2012-09-09 13:47:53 +00:00
|
|
|
require 'formula'
|
|
|
|
|
|
|
|
class Fail2ban < Formula
|
|
|
|
homepage 'http://www.fail2ban.org/'
|
|
|
|
url 'http://cloud.github.com/downloads/fail2ban/fail2ban/fail2ban_0.8.7.1.orig.tar.gz'
|
|
|
|
sha1 'ec1a7ea1360056d5095bb9de733c1e388bd22373'
|
|
|
|
|
2013-01-21 09:33:56 +00:00
|
|
|
depends_on :python
|
|
|
|
|
2012-09-09 13:47:53 +00:00
|
|
|
def install
|
2013-01-21 09:33:56 +00:00
|
|
|
rm 'setup.cfg'
|
2012-09-09 13:47:53 +00:00
|
|
|
inreplace 'setup.py' do |s|
|
|
|
|
s.gsub! /\/etc/, etc
|
|
|
|
s.gsub! /\/var/, var
|
|
|
|
end
|
|
|
|
|
|
|
|
# Replace hardcoded paths
|
|
|
|
inreplace 'fail2ban-client', '/usr/share/fail2ban', libexec
|
|
|
|
inreplace 'fail2ban-server', '/usr/share/fail2ban', libexec
|
|
|
|
inreplace 'fail2ban-regex', '/usr/share/fail2ban', libexec
|
|
|
|
|
|
|
|
inreplace 'fail2ban-client', '/etc', etc
|
|
|
|
inreplace 'fail2ban-server', '/etc', etc
|
|
|
|
inreplace 'fail2ban-regex', '/etc', etc
|
|
|
|
|
|
|
|
inreplace 'fail2ban-server', '/var', var
|
2013-01-21 09:33:56 +00:00
|
|
|
inreplace 'config/fail2ban.conf', '/var/run', (var/'run')
|
2012-09-09 13:47:53 +00:00
|
|
|
|
2013-01-21 09:33:56 +00:00
|
|
|
python do
|
|
|
|
system python, "setup.py", "install", "--prefix=#{prefix}", "--install-lib=#{libexec}"
|
|
|
|
end
|
2012-09-09 13:47:53 +00:00
|
|
|
end
|
|
|
|
|
2012-11-25 15:06:41 +00:00
|
|
|
plist_options :startup => true
|
|
|
|
|
|
|
|
def plist; <<-EOS.undent
|
2012-09-09 13:47:53 +00:00
|
|
|
<?xml version="1.0" encoding="UTF-8"?>
|
|
|
|
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
|
|
|
|
<plist version="1.0">
|
|
|
|
<dict>
|
|
|
|
<key>Label</key>
|
|
|
|
<string>#{plist_name}</string>
|
|
|
|
<key>ProgramArguments</key>
|
|
|
|
<array>
|
2012-11-25 15:06:41 +00:00
|
|
|
<string>#{opt_prefix}/bin/fail2ban-client</string>
|
2013-04-12 19:34:03 +00:00
|
|
|
<string>-x</string>
|
2012-09-09 13:47:53 +00:00
|
|
|
<string>start</string>
|
|
|
|
</array>
|
|
|
|
<key>RunAtLoad</key>
|
|
|
|
<true/>
|
|
|
|
</dict>
|
|
|
|
</plist>
|
2012-11-25 15:06:41 +00:00
|
|
|
EOS
|
2012-09-09 13:47:53 +00:00
|
|
|
end
|
|
|
|
|
2013-01-21 09:33:56 +00:00
|
|
|
def caveats
|
|
|
|
<<-EOS.undent
|
|
|
|
#{python.standard_caveats if python}
|
2012-09-09 13:47:53 +00:00
|
|
|
Before using Fail2Ban for the first time you should edit jail
|
|
|
|
configuration and enable the jails that you want to use, for instance
|
|
|
|
ssh-ipfw. Also make sure that they point to the correct configuration
|
|
|
|
path. I.e. on Mountain Lion the sshd logfile should point to
|
|
|
|
/var/log/system.log.
|
|
|
|
|
|
|
|
* #{etc}/fail2ban/jail.conf
|
|
|
|
|
|
|
|
The Fail2Ban wiki has two pages with instructions for MacOS X Server that
|
|
|
|
describes how to set up the Jails for the standard MacOS X Server
|
|
|
|
services for the respective releases.
|
|
|
|
|
|
|
|
10.4: http://www.fail2ban.org/wiki/index.php/HOWTO_Mac_OS_X_Server_(10.4)
|
|
|
|
10.5: http://www.fail2ban.org/wiki/index.php/HOWTO_Mac_OS_X_Server_(10.5)
|
|
|
|
EOS
|
|
|
|
end
|
|
|
|
end
|