Summary: Ban IPs that make too many password failures
Name: fail2ban
Version: 0.6.2
Release: 3%{?dist}
License: GPL
Group: System Environment/Daemons
URL: http://fail2ban.sourceforge.net/
Source0: http://prdownloads.sourceforge.net/%{name}/%{name}-%{version}.tar.bz2
Patch0: fail2ban-0.6.2-init.patch
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root
BuildRequires: python-devel >= 2.3, dos2unix
BuildArch: noarch
Requires: iptables, tcp_wrappers, shorewall
Requires(post): /sbin/chkconfig
Requires(preun): /sbin/chkconfig
Requires(preun): /sbin/service

%description
Fail2ban scans log files like /var/log/pwdfail or
/var/log/apache/error_log and bans IP that makes too many password
failures. It updates firewall rules to reject the IP address.

%prep
%setup -q
grep -rl /usr/lib/fail2ban . \
  | xargs sed -i -e's,/usr/lib/fail2ban,%{_datadir}/fail2ban,g'
dos2unix config/redhat-initd
%patch0 -p1 -b .init

%build
python setup.py build

%install
rm -rf %{buildroot}
python setup.py install -O1 --root %{buildroot}
mkdir -p %{buildroot}%{_initrddir}
install -p -m 755 config/redhat-initd %{buildroot}%{_initrddir}/fail2ban
mkdir -p %{buildroot}%{_sysconfdir}
install -p -m 644 config/fail2ban.conf.iptables %{buildroot}%{_sysconfdir}/fail2ban.conf
mkdir -p %{buildroot}%{_mandir}/man{8,5}
install -p -m 644 man/fail2ban.8 %{buildroot}%{_mandir}/man8
install -p -m 644 man/fail2ban.conf.5 %{buildroot}%{_mandir}/man5

%clean
rm -rf %{buildroot}

%post
/sbin/chkconfig --add %{name}

%preun
if [ $1 = 0 ]; then
  /sbin/service %{name} stop > /dev/null 2>&1
  /sbin/chkconfig --del %{name}
fi

%files
%defattr(-,root,root,-)
%doc README TODO CHANGELOG
%doc config/fail2ban.conf*
%config(noreplace) %{_sysconfdir}/fail2ban.conf
%{_bindir}/fail2ban
%{_datadir}/fail2ban
%{_initrddir}/fail2ban
%{_mandir}/man8/fail2ban.8*
%{_mandir}/man5/fail2ban.conf.5*

%changelog
* Sat Dec 30 2006 Axel Thimm <Axel.Thimm@ATrpms.net> - 0.6.2-3
- Remove forgotten condrestart.

* Fri Dec 29 2006 Axel Thimm <Axel.Thimm@ATrpms.net> - 0.6.2-2
- Move /usr/lib/fail2ban to %%{_datadir}/fail2ban.
- Don't default chkconfig to enabled.
- Add dependencies on service/chkconfig.
- Use example iptables/ssh config as default config.

* Mon Dec 25 2006 Axel Thimm <Axel.Thimm@ATrpms.net> - 0.6.2-1
- Initial build.