Description of problem:
The contributed mod_ban.c module isn't built as an optional part of proftpd.
Version-Release number of selected component (if applicable):
Look at bill-of-materials.
Steps to Reproduce:
1. rpm -q --filesbypkg proftpd | grep mod_ban
Created attachment 313018 [details]
Patch to support mod_ban.c as separate package.
I'll include this change in the next devel proftpd build. But it won't be as a sub-package, as it doesn't add any extra external dependency.
I was having pcap version rebuild problems with devel, so it might take a little while before it gets sorted out.
(In reply to comment #2)
> I'll include this change in the next devel proftpd build. But it won't be as a
> sub-package, as it doesn't add any extra external dependency.
> I was having pcap version rebuild problems with devel, so it might take a
> little while before it gets sorted out.
Could you build and post an FC8 x86_64 rpm? I'd like to test it on a production machine. Thanks.
Noticed that we've not modified the proftpd.conf file to have:
# LoadModule mod_ban.c
We might also want to append:
# BanEngine on
# BanLog /var/log/proftpd/ban.log
# BanTable /var/run/proftpd/ban.tab
# # If the same client reaches the MaxLoginAttempts limit 2 times
# # within 10 minutes, automatically add a ban for that client that
# # will expire after one hour.
# BanOnEvent MaxLoginAttempts 2/00:10:00 01:00:00
# # Allow the FTP admin to manually add/remove bans
# BanControlsACLs all allow user ftpadm
to show users how to enable mod_ban.
I've updated the default proftpd.conf to include this. It's (at last) included in the packages which should be pushed out shortly.