Hide Forgot
Description of problem: The contributed mod_ban.c module isn't built as an optional part of proftpd. Version-Release number of selected component (if applicable): 1.3.1-3 How reproducible: Look at bill-of-materials. Steps to Reproduce: 1. rpm -q --filesbypkg proftpd | grep mod_ban 2. 3. Actual results: (nothing) Expected results: proftpd /usr/libexec/proftpd/mod_ban.so Additional info:
Created attachment 313018 [details] Patch to support mod_ban.c as separate package.
I'll include this change in the next devel proftpd build. But it won't be as a sub-package, as it doesn't add any extra external dependency. I was having pcap version rebuild problems with devel, so it might take a little while before it gets sorted out.
(In reply to comment #2) > I'll include this change in the next devel proftpd build. But it won't be as a > sub-package, as it doesn't add any extra external dependency. > > I was having pcap version rebuild problems with devel, so it might take a > little while before it gets sorted out. Could you build and post an FC8 x86_64 rpm? I'd like to test it on a production machine. Thanks.
Noticed that we've not modified the proftpd.conf file to have: #<IfModule mod_dso.c> # LoadModule mod_ban.c ... #</IfModule> We might also want to append: #MaxLoginAttempts 1 # #<IfModule mod_ban.c> # BanEngine on # BanLog /var/log/proftpd/ban.log # BanTable /var/run/proftpd/ban.tab # # # If the same client reaches the MaxLoginAttempts limit 2 times # # within 10 minutes, automatically add a ban for that client that # # will expire after one hour. # BanOnEvent MaxLoginAttempts 2/00:10:00 01:00:00 # # # Allow the FTP admin to manually add/remove bans # BanControlsACLs all allow user ftpadm #</IfModule> to show users how to enable mod_ban.
I've updated the default proftpd.conf to include this. It's (at last) included in the packages which should be pushed out shortly.