2 # postinst script for bind9-cn
4 # see: dh_installdeb(1)
8 # summary of how this script can be called:
9 # * <postinst> `configure' <most-recently-configured-version>
10 # * <old-postinst> `abort-upgrade' <new version>
11 # * <conflictor's-postinst> `abort-remove' `in-favour' <package>
13 # * <deconfigured's-postinst> `abort-deconfigure' `in-favour'
14 # <failed-install-package> <version> `removing'
15 # <conflicting-package> <version>
16 # for details, see http://www.debian.org/doc/debian-policy/ or
17 # the debian-policy package
21 configure|reconfigure)
31 . /usr/share/carnet-tools/functions.sh
33 CONF="/etc/fail2ban/jail.conf"
35 if [ -e "$CONF" ]; then
36 # enable ssh, pam-generic, sasl, proftpd and vsftpd service
37 echo "CN: Enabling SSH, PAM-generic, SASL, ProFTPD, vsftpd and Dovecot support..."
38 perl -ne 'if (/^\[(ssh|pam-generic|sasl|proftpd|vsftpd|dovecot)\]/ .. /^enabled/) { $_ =~ s/^enabled\s+=\s+false/enabled = true/gi }; print $_' "$CONF" > "$CONF.$$" && \
39 cp_mv "$CONF.$$" "$CONF"
42 # add network address and class if needed
43 cp_get_netaddr || true
45 IGNOREIP=$(grep '^ignoreip' "$CONF")
46 if ! echo "$IGNOREIP" | grep -q "$NETADDR"; then
47 echo "CN: Enabling local IP ranges exclusion..."
48 cp_check_and_sed '^ignoreip' \
49 "s;^\(ignoreip.*\)$;\1 $NETADDR;g" "$CONF" || true
53 # restart the services
54 service fail2ban restart || exit $?
56 # dh_installdeb will replace this with shell code automatically
57 # generated by other debhelper scripts.