On Wed, Mar 19, 2014 at 02:32:40PM -0600, Orion Poplawski wrote:
Hmm, I like this alternative a lot. I'm probably taking this
too
far, but I'm thinking of:
fail2ban-server - core components with minimal deps
fail2ban-firewalld - firewalld support/configuration - requires firewalld
fail2ban-hostsdeny - tcp_wrappers hosts.deny support - requires tcp_wrappers
fail2ban-mail - mail actions - requires /usr/bin/mail
fail2ban-sendmail - sendmail actions - requires /usr/sbin/sendmail
fail2ban-shorewall - shorewall support - requires shorewall
fail2ban-systemd - systemd journal configuration
fail2ban - default component - installs -firewalld,-sendmail,-systemd
fail2ban-all - installs everything - also requires /usr/bin/whois
Comments?
That _might_ be going overboard. But it certainly does allow a lot of
flexibility. Somewhere there is a balance between that flexibility and the
extra packaging work and potential user confusion, and I'm not exactly sure
where that line is in this case. :)
(Call the last one -journald or -systemd-journald by the way -- otherwise,
people will expect the unit files to be there.)
--
Matthew Miller -- Fedora Project -- <mattdm(a)fedoraproject.org>