[Package Request] - fail2ban

[rpalmer-koverly]

What package is missing from Amazon Linux 2023? Please describe and include package name.

fail2ban:

fail2ban-server-0.11.2-3.el7.noarch fail2ban-0.11.2-3.el7.noarch fail2ban-sendmail-0.11.2-3.el7.noarch fail2ban-firewalld-0.11.2-3.el7.noarch

Is this an update to existing package or new package request?

New package request

Is this package available in Amazon Linux 2? If it is available via external sources such as EPEL, please specify.

Yes, from EPEL:

fail2ban-server-0.11.2-3.el7.noarch fail2ban-0.11.2-3.el7.noarch fail2ban-sendmail-0.11.2-3.el7.noarch fail2ban-firewalld-0.11.2-3.el7.noarch

Any additional information you'd like to include. (use-cases, etc)

We use fail2ban to lockout IP addresses that probe our bastion hosts. This package is a fairly essential tool for our PCI DSS compliance.

[michaelboyles]

According to this AWS support article the reason this is missing is that "Amazon Linux 2023 uses Python3.9 by default", but Fail2ban supports Python3.5+ now. So I think there shouldn't be anything blocking this any more, right?

[wackysysadmin]

Building from sources using version 1.1.0 and the sed command thelliez's comment on the AWS Repost has it working. Would be nice to see Amazon package it up and provide it out through their provided repositories for a more native solution to getting fail2ban up on AL2023.

[kingIZZZY]

+1 please provide fail2ban for AL2023+

[daniejstriata]

Latest fail2ban Spec from Fedora builds on AL2023 without issues. I've been using it for quite some time. https://copr.fedorainfracloud.org/coprs/faramirza/al2023_v2/package/fail2ban/

[Complectia]

Can we get an update as to whether or not fail2ban is on the list of packages either under evaluation or to be added to Amazon Linux 2023?

[kingIZZZY]

I just switched to CrowdSec

[paulez]

We have released fail2ban with the Amazon Linux 2023.6 release. Please refer to release notes for 2023.6.20241010.

[Complectia]

Excellent news - thank you!