--- /dev/null
+class fail2ban {
+ package { 'fail2ban':
+ ensure => installed,
+ }
+
+ service { 'fail2ban':
+ ensure => running,
+ }
+
+ @ferm::conf { 'f2b':
+ content => @(EOF),
+ @hook post "type fail2ban-client > /dev/null && (fail2ban-client ping > /dev/null && fail2ban-client reload > /dev/null ) || true";
+ @hook flush "type fail2ban-client > /dev/null && (fail2ban-client ping > /dev/null && fail2ban-client reload > /dev/null ) || true";
+ | EOF
+ }
+
+}