puppet-module-fail2ban

Table of Contents

1. Overview
2. Usage - Configuration options
3. Reference - Parameter and detailed reference to all options
4. Limitations - OS compatibility, etc.
5. Development - Guide for contributing to the module
6. TODO
7. Additional Information

Overview

This module manages Fail2ban.

Usage

fail2ban

Install and configure fail2ban with SSH jail.

class { 'fail2ban':
  jails => ['sshd'],
}

Configure fail2ban to not ban a local subnet

class { 'fail2ban':
  jails            => ['sshd'],
  default_ignoreip => ['10.0.0.0/8'],
}

Reference

http://treydock.github.io/puppet-module-fail2ban/

Limitations

This module has been tested on:

• CentOS/RedHat 6 x86_64
• CentOS/RedHat 7 x86_64

Development

Testing

Testing requires the following dependencies:

• rake
• bundler

Install gem dependencies

bundle install

Run unit tests

bundle exec rake test

If you have Vagrant >= 1.2.0 installed you can run system tests

bundle exec rake beaker

TODO

Further Information