comparison manifests/templates.pp @ 197:23c4f6a38b57 puppet-3.6

Make Fail2Ban SSH rules more agressive
author IBBoard <dev@ibboard.co.uk>
date Mon, 22 Apr 2019 20:05:30 +0100
parents f70831cc2864
children 81dfe3ca043f
comparison
equal deleted inserted replaced
196:d3ef339b53a6 197:23c4f6a38b57
385 file { '/etc/fail2ban/filter.d/ibb-postfix.conf': 385 file { '/etc/fail2ban/filter.d/ibb-postfix.conf':
386 source => 'puppet:///common/fail2ban/ibb-postfix.conf', 386 source => 'puppet:///common/fail2ban/ibb-postfix.conf',
387 } 387 }
388 file { '/etc/fail2ban/filter.d/ibb-sshd.conf': 388 file { '/etc/fail2ban/filter.d/ibb-sshd.conf':
389 source => 'puppet:///common/fail2ban/ibb-sshd.conf', 389 source => 'puppet:///common/fail2ban/ibb-sshd.conf',
390 }
391 file { '/etc/fail2ban/filter.d/ibb-sshd-bad-user.conf':
392 source => 'puppet:///common/fail2ban/ibb-sshd-bad-user.conf',
390 } 393 }
391 # Because one of our rules checks fail2ban's log, but the service dies without the file 394 # Because one of our rules checks fail2ban's log, but the service dies without the file
392 file { '/var/log/fail2ban.log': 395 file { '/var/log/fail2ban.log':
393 ensure => present, 396 ensure => present,
394 owner => 'root', 397 owner => 'root',