Version information
released May 8th 2014
Start using this module
Add this module to your Puppetfile:
mod 'puppetlabs-denyhosts', '0.1.0'
Learn more about managing modules with a PuppetfileDocumentation
puppetlabs/denyhosts — version 0.1.0 May 8th 2014
puppetlabs-denyhosts
This module supplies basic configuration for DenyHosts
Class: denyhosts
It provides a class that controls which hosts are allowed to connect and the email address to alert on violations, for example:
class { "denyhosts":
adminemail => "",
allow => [ 'host1', 'host2', 'host3' ],
}
The email address defaults to root@localhost.
You could also use a hiera look-up to query the data:
class { "denyhosts":
adminemail => "",
allow => hiera("allowhosts"),
}
2014-05-08 Release 0.1.0
Summary: This release basically parameterizes a bunch of things. I don't think it's backwards incompatible, but I could be wrong.
Changes:
- adminemail defaults to 'root@localhost',
- allow defaults to [],
- secure_log default depends on OS
- hosts_deny defaults to '/etc/hosts.deny',
- purge_deny defaults to '',
- purge_threshold defaults to undef,
- block_service defaults to 'sshd',
- deny_threshold_invalid defaults to '5',
- deny_threshold_valid defaults to '10',
- deny_threshold_root defaults to '1',
- deny_threshold_restricted defaults to '1',
- work_dir defaults to '/var/lib/denyhosts',
- suspicious_login_report_allowed_hosts defaults to 'YES',
- hostname_lookup defaults to 'YES',
- lock_file default depends on OS
- smtp_host defaults to 'localhost',
- smtp_port defaults to '25',
- smtp_username defaults to undef,
- smtp_password defaults to undef,
- smtp_from defaults to true,
- smtp_subject defaults to 'DenyHosts Report',
- smtp_date_format defaults to undef,
- syslog_report defaults to undef,
- allowed_hosts_hostname_lookup defaults to undef,
- age_reset_valid defaults to '5d',
- age_reset_root defaults to '25d',
- age_reset_restricted defaults to '25d',
- age_reset_invalid defaults to '10d',
- reset_on_success defaults to undef,
- plugin_deny defaults to undef,
- plugin_purge defaults to undef,
- userdef_failed_entry_regex defaults to undef,
- daemon_log defaults to '/var/log/denyhosts',
- daemon_log_time_format defaults to undef,
- daemon_log_message_format defaults to undef,
- daemon_sleep defaults to '30s',
- daemon_purge defaults to '1h',
- sync_server defaults to 'http://xmlrpc.denyhosts.net:9911',
- sync_interval defaults to undef,
- sync_upload defaults to 'no',
- sync_download defaults to undef,
- sync_download_threshold defaults to undef,
- sync_download_resiliency defaults to undef,
- version defaults to 'installed'
Dependencies
- puppetlabs/stdlib (>= 2.1.0)
Copyright 2012 Puppet Labs Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.