From a04440c3b264d451e4ee8c1ee0b0ec62c7885bd5 Mon Sep 17 00:00:00 2001
From: Daniel Berteaud <daniel@firewall-services.com>
Date: Fri, 3 May 2013 15:41:30 +0200
Subject: [PATCH] add ssh-ddos jail

---
 .../e-smith/templates/etc/fail2ban/jail.conf/30Service10ssh  | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/root/etc/e-smith/templates/etc/fail2ban/jail.conf/30Service10ssh b/root/etc/e-smith/templates/etc/fail2ban/jail.conf/30Service10ssh
index 04c7d13..dcfc316 100644
--- a/root/etc/e-smith/templates/etc/fail2ban/jail.conf/30Service10ssh
+++ b/root/etc/e-smith/templates/etc/fail2ban/jail.conf/30Service10ssh
@@ -15,4 +15,16 @@ EOF
 $OUT .= "           smeserver-sendmail[name=\"SSH\",dest=$maildest]\n"
     if ($mail eq 'enabled');
 
+$OUT .=<<"EOF";
+
+[ssh-ddos]
+enabled  = true
+filter   = sshd-ddos
+logpath  = /var/log/sshd/current
+action   = smeserver-iptables[port="$port",protocol=tcp,bantime=$bantime]
+EOF
+
+$OUT .= "           smeserver-sendmail[name=\"SSH\",dest=$maildest]\n"
+    if ($mail eq 'enabled');
+
 }