class fail2ban {
	package { 'fail2ban':
		ensure => installed,
	}

	service { 'fail2ban':
		ensure  => running,
	}

	@ferm::conf { 'f2b':
		content  => @(EOF),
				@hook post  "type fail2ban-client > /dev/null && (fail2ban-client ping > /dev/null && fail2ban-client reload > /dev/null ) || true";
				@hook flush "type fail2ban-client > /dev/null && (fail2ban-client ping > /dev/null && fail2ban-client reload > /dev/null ) || true";
				| EOF
	}

}