2004-10-12 21:45:41 +00:00
|
|
|
|
__ _ _ ___ _
|
|
|
|
|
|
/ _|__ _(_) |_ ) |__ __ _ _ _
|
|
|
|
|
|
| _/ _` | | |/ /| '_ \/ _` | ' \
|
|
|
|
|
|
|_| \__,_|_|_/___|_.__/\__,_|_||_|
|
|
|
|
|
|
|
|
|
|
|
|
=============================================================
|
2008-07-21 14:13:13 +00:00
|
|
|
|
Fail2Ban (version 0.8.3) 2008/07/17
|
2004-10-12 21:45:41 +00:00
|
|
|
|
=============================================================
|
|
|
|
|
|
|
2008-07-21 14:13:13 +00:00
|
|
|
|
ver. 0.8.3 (2008/07/17) - stable
|
|
|
|
|
|
----------
|
|
|
|
|
|
- Process failtickets as long as failmanager is not empty.
|
|
|
|
|
|
- Added "pam-generic" filter and more configuration fixes.
|
|
|
|
|
|
Thanks to Yaroslav Halchenko.
|
|
|
|
|
|
- Fixed socket path in redhat and suse init script. Thanks to
|
|
|
|
|
|
Jim Wight.
|
|
|
|
|
|
- Fixed PID file while started in daemon mode. Thanks to
|
|
|
|
|
|
Christian Jobic who submitted a similar patch.
|
|
|
|
|
|
- Fixed "fail2ban-client get <jail> logpath". Bug #1916986.
|
|
|
|
|
|
- Added gssftpd filter. Thanks to Kevin Zembower.
|
|
|
|
|
|
- Added "Day/Month/Year Hour:Minute:Second" date template.
|
|
|
|
|
|
Thanks to Dennis Winter.
|
|
|
|
|
|
- Fixed ignoreregex processing in fail2ban-client. Thanks to
|
|
|
|
|
|
René Berber.
|
|
|
|
|
|
- Added ISO 8601 date/time format.
|
|
|
|
|
|
- Added and changed some logging level and messages.
|
|
|
|
|
|
- Added missing ignoreregex to filters. Thanks to Klaus
|
|
|
|
|
|
Lehmann.
|
|
|
|
|
|
- Use poll instead of select in asyncore.loop. This should
|
|
|
|
|
|
solve the "Unknown error 514". Thanks to Michael Geiger and
|
|
|
|
|
|
Klaus Lehmann.
|
|
|
|
|
|
|
2008-03-06 01:19:06 +00:00
|
|
|
|
ver. 0.8.2 (2008/03/06) - stable
|
|
|
|
|
|
----------
|
|
|
|
|
|
- Fixed named filter. Thanks to Yaroslav Halchenko
|
|
|
|
|
|
- Fixed wrong path for apache-auth in jail.conf. Thanks to
|
|
|
|
|
|
Vincent Deffontaines
|
|
|
|
|
|
- Fixed timezone bug with epoch date template. Thanks to
|
|
|
|
|
|
Michael Hanselmann
|
|
|
|
|
|
- Added "full line failregex" patch. Thanks to Yaroslav
|
|
|
|
|
|
Halchenko. It will be possible to create stronger failregex
|
|
|
|
|
|
against log injection
|
|
|
|
|
|
- Fixed ipfw action script. Thanks to Nick Munger
|
|
|
|
|
|
- Removed date from logging message when using SYSLOG. Thanks
|
|
|
|
|
|
to Iain Lea
|
|
|
|
|
|
- Fixed "ignore IPs". Only the first value was taken into
|
|
|
|
|
|
account. Thanks to Adrien Clerc
|
|
|
|
|
|
- Moved socket to /var/run/fail2ban.
|
|
|
|
|
|
- Rewrote the communication server.
|
|
|
|
|
|
- Refactoring. Reduced number of files.
|
|
|
|
|
|
- Removed Python 2.4. Minimum required version is now Python
|
|
|
|
|
|
2.3.
|
|
|
|
|
|
- New log rotation detection algorithm.
|
|
|
|
|
|
- Print monitored files in status.
|
|
|
|
|
|
- Create a PID file in /var/run/fail2ban/. Thanks to Julien
|
|
|
|
|
|
Perez.
|
|
|
|
|
|
- Fixed "Feb 29" bug. Thanks to James Andrewartha who pointed
|
|
|
|
|
|
this out. Thanks to Yaroslav Halchenko for the fix.
|
|
|
|
|
|
- "reload <jail>" reloads a single jail and the parameters in
|
|
|
|
|
|
fail2ban.conf.
|
|
|
|
|
|
- Added Mac OS/X startup script. Thanks to Bill Heaton.
|
|
|
|
|
|
- Absorbed some Debian patches. Thanks to Yaroslav Halchenko.
|
|
|
|
|
|
- Replaced "echo" with "printf" in actions. Fix #1839673
|
|
|
|
|
|
- Replaced "reject" with "drop" in shorwall action. Fix
|
|
|
|
|
|
#1854875
|
|
|
|
|
|
- Fixed Debian bug #456567, #468477, #462060, #461426
|
|
|
|
|
|
- readline is now optional in fail2ban-client (not needed in
|
|
|
|
|
|
fail2ban-server).
|
|
|
|
|
|
|
2007-08-14 21:39:15 +00:00
|
|
|
|
ver. 0.8.1 (2007/08/14) - stable
|
2007-06-07 21:29:18 +00:00
|
|
|
|
----------
|
|
|
|
|
|
- Fixed vulnerability in sshd.conf. Thanks to Daniel B. Cid
|
2007-06-25 21:43:44 +00:00
|
|
|
|
- Expand <HOST> in ignoreregex. Thanks to Yaroslav Halchenko
|
2007-06-25 21:57:10 +00:00
|
|
|
|
- Improved regular expressions. Thanks to Yaroslav Halchenko
|
2007-07-10 20:24:44 +00:00
|
|
|
|
and others
|
2007-07-05 16:10:33 +00:00
|
|
|
|
- Added sendmail actions. The action started with "mail" are
|
|
|
|
|
|
now deprecated. Thanks to Raphaël Marichez
|
2007-07-10 19:54:01 +00:00
|
|
|
|
- Added "ignoreregex" support to fail2ban-regex
|
2007-07-10 20:04:57 +00:00
|
|
|
|
- Updated suse-initd and added it to MANIFEST. Thanks to
|
|
|
|
|
|
Christian Rauch
|
2007-07-11 22:12:45 +00:00
|
|
|
|
- Tightening up the pid check in redhat-initd. Thanks to
|
|
|
|
|
|
David Nutter
|
2007-07-11 22:27:16 +00:00
|
|
|
|
- Added webmin authentication filter. Thanks to Guillaume
|
|
|
|
|
|
Delvit
|
2007-08-07 22:11:34 +00:00
|
|
|
|
- Removed textToDns() which is not required anymore. Thanks
|
|
|
|
|
|
to Yaroslav Halchenko
|
2007-08-08 22:13:09 +00:00
|
|
|
|
- Added new action iptables-allports. Thanks to Yaroslav
|
|
|
|
|
|
Halchenko
|
2007-08-08 22:16:22 +00:00
|
|
|
|
- Added "named" date format to date detector. Thanks to
|
|
|
|
|
|
Yaroslav Halchenko
|
2007-08-08 22:21:15 +00:00
|
|
|
|
- Added filter file for named (bind9). Thanks to Yaroslav
|
|
|
|
|
|
Halchenko
|
2007-08-08 22:31:47 +00:00
|
|
|
|
- Fixed vsftpd filter. Thanks to Yaroslav Halchenko
|
2007-06-07 21:29:18 +00:00
|
|
|
|
|
2007-05-03 20:30:28 +00:00
|
|
|
|
ver. 0.8.0 (2007/05/03) - stable
|
2007-05-01 22:42:10 +00:00
|
|
|
|
----------
|
|
|
|
|
|
- Fixed RedHat init script. Thanks to Jonathan Underwood
|
2007-05-03 20:03:13 +00:00
|
|
|
|
- Added Solaris 10 files. Thanks to Hanno 'Rince' Wagner
|
2007-05-01 22:42:10 +00:00
|
|
|
|
|
2007-04-19 21:57:27 +00:00
|
|
|
|
ver. 0.7.9 (2007/04/19) - release candidate
|
2007-03-22 22:20:36 +00:00
|
|
|
|
----------
|
|
|
|
|
|
- Close opened handlers. Thanks to Yaroslav Halchenko
|
2007-03-26 21:17:31 +00:00
|
|
|
|
- Fixed "reload" bug. Many many thanks to Yaroslav Halchenko
|
2007-04-01 20:42:05 +00:00
|
|
|
|
- Added date format for asctime without year
|
2007-04-18 20:22:54 +00:00
|
|
|
|
- Modified filters config. Thanks to Michael C. Haller
|
2007-04-19 21:43:45 +00:00
|
|
|
|
- Fixed a small bug in mail-buffered.conf
|
2007-03-22 22:20:36 +00:00
|
|
|
|
|
2007-03-21 21:44:07 +00:00
|
|
|
|
ver. 0.7.8 (2007/03/21) - release candidate
|
2007-02-11 23:22:32 +00:00
|
|
|
|
----------
|
|
|
|
|
|
- Fixed asctime pattern in datedetector.py
|
2007-02-12 21:50:50 +00:00
|
|
|
|
- Added new filters/actions. Thanks to Yaroslav Halchenko
|
2007-02-20 20:44:47 +00:00
|
|
|
|
- Added Suse init script and modified gentoo-initd. Thanks to
|
|
|
|
|
|
Christian Rauch
|
2007-02-25 23:53:22 +00:00
|
|
|
|
- Moved every locking statements in a try..finally block
|
2007-02-11 23:22:32 +00:00
|
|
|
|
|
2007-02-08 21:14:01 +00:00
|
|
|
|
ver. 0.7.7 (2007/02/08) - release candidate
|
2007-01-04 23:34:35 +00:00
|
|
|
|
----------
|
|
|
|
|
|
- Added signal handling in fail2ban-client
|
|
|
|
|
|
- Added a wonderful visual effect when waiting on the server
|
2007-01-08 21:15:47 +00:00
|
|
|
|
- fail2ban-client returns an error code if configuration is
|
|
|
|
|
|
not valid
|
2007-01-08 21:40:37 +00:00
|
|
|
|
- Added new filters/actions. Thanks to Yaroslav Halchenko
|
2007-01-21 22:23:46 +00:00
|
|
|
|
- Call Python interpreter directly (instead of using "env")
|
|
|
|
|
|
- Added file support to fail2ban-regex. Benchmark feature has
|
|
|
|
|
|
been removed
|
2007-01-29 20:25:50 +00:00
|
|
|
|
- Added cacti script and template.
|
2007-01-29 21:46:59 +00:00
|
|
|
|
- Added IP list in "status <JAIL>". Thanks to Eric Gerbier
|
2007-01-04 23:34:35 +00:00
|
|
|
|
|
2007-01-04 12:58:21 +00:00
|
|
|
|
ver. 0.7.6 (2007/01/04) - beta
|
2006-12-10 16:46:54 +00:00
|
|
|
|
----------
|
|
|
|
|
|
- Added a "sleep 1" in redhat-initd. Thanks to Jim Wight
|
2006-12-13 23:02:46 +00:00
|
|
|
|
- Use /dev/log for SYSLOG output. Thanks to Joerg Sommrey
|
2006-12-14 21:20:03 +00:00
|
|
|
|
- Use numeric output for iptables in "actioncheck"
|
2006-12-19 21:51:14 +00:00
|
|
|
|
- Fixed removal of host in hosts.deny. Thanks to René Berber
|
2006-12-23 09:51:41 +00:00
|
|
|
|
- Added new date format (2006-12-21 06:43:20) and Exim4
|
|
|
|
|
|
filter. Thanks to mEDI
|
2006-12-23 16:31:00 +00:00
|
|
|
|
- Several "failregex" and "ignoreregex" are now accepted.
|
|
|
|
|
|
Creation of rules should be easier now.
|
2007-01-03 18:15:55 +00:00
|
|
|
|
- Added license in COPYING. Thanks to Axel Thimm
|
2007-01-04 11:58:58 +00:00
|
|
|
|
- Allow comma in action options. The value of the option must
|
|
|
|
|
|
be escaped with " or '. Thanks to Yaroslav Halchenko
|
2007-01-04 12:58:21 +00:00
|
|
|
|
- Now Fail2ban goes in /usr/share/fail2ban instead of
|
|
|
|
|
|
/usr/lib/fail2ban. This is more compliant with FHS. Thanks
|
|
|
|
|
|
to Axel Thimm and Yaroslav Halchenko
|
2006-12-10 16:46:54 +00:00
|
|
|
|
|
2006-12-07 21:47:53 +00:00
|
|
|
|
ver. 0.7.5 (2006/12/07) - beta
|
2006-11-12 10:56:40 +00:00
|
|
|
|
----------
|
|
|
|
|
|
- Do not ban a host that is currently banned. Thanks to
|
|
|
|
|
|
Yaroslav Halchenko
|
|
|
|
|
|
- The supported tags in "action(un)ban" are <ip>, <failures>
|
|
|
|
|
|
and <time>
|
|
|
|
|
|
- Fixed refactoring bug (getLastcommand -> getLastAction)
|
2006-11-12 14:52:36 +00:00
|
|
|
|
- Added option "ignoreregex" in filter scripts and jail.conf.
|
|
|
|
|
|
Feature Request #1283304
|
2006-11-12 21:59:14 +00:00
|
|
|
|
- Fixed a bug in user defined time regex/pattern
|
2006-11-16 21:07:42 +00:00
|
|
|
|
- Improved documentation
|
|
|
|
|
|
- Moved version.py and protocol.py to common/
|
2006-11-18 15:15:58 +00:00
|
|
|
|
- Merged "maxtime" option with "findtime"
|
2006-11-19 21:36:32 +00:00
|
|
|
|
- Added "<HOST>" tag support in failregex which matches
|
|
|
|
|
|
default IP address/hostname. "(?P<host>\S)" is still valid
|
|
|
|
|
|
and supported
|
|
|
|
|
|
- Fixed exception when calling fail2ban-server with unknown
|
|
|
|
|
|
option
|
2006-11-26 22:22:54 +00:00
|
|
|
|
- Fixed Debian bug 400162. The "socket" option is now handled
|
|
|
|
|
|
correctly by fail2ban-client
|
2006-12-03 22:01:33 +00:00
|
|
|
|
- Fixed RedHat init script. Thanks to Justin Shore
|
|
|
|
|
|
- Changed timeout to 30 secondes before assuming the server
|
2006-12-07 21:47:53 +00:00
|
|
|
|
cannot be started. Thanks to Joël Bertrand
|
2006-11-12 10:56:40 +00:00
|
|
|
|
|
2006-11-01 22:13:44 +00:00
|
|
|
|
ver. 0.7.4 (2006/11/01) - beta
|
2006-10-01 21:23:22 +00:00
|
|
|
|
----------
|
|
|
|
|
|
- Improved configuration files. Thanks to Yaroslav Halchenko
|
|
|
|
|
|
- Added man page for "fail2ban-regex"
|
|
|
|
|
|
- Moved ban/unban messages from "info" level to "warn"
|
2006-10-09 18:05:13 +00:00
|
|
|
|
- Added "-s" option to specify the socket path and "socket"
|
|
|
|
|
|
option in "fail2ban.conf"
|
2006-10-16 19:42:50 +00:00
|
|
|
|
- Added "backend" option in "jail.conf"
|
2006-10-19 20:15:24 +00:00
|
|
|
|
- Added more filters/actions and jail samples. Thanks to Nick
|
2006-10-22 23:49:10 +00:00
|
|
|
|
Munger, Christoph Haas
|
2006-10-18 22:35:32 +00:00
|
|
|
|
- Improved testing framework
|
2006-10-23 20:34:29 +00:00
|
|
|
|
- Fixed a bug in the return code handling of the executed
|
|
|
|
|
|
commands. Thanks to Yaroslav Halchenko
|
2006-10-30 22:47:30 +00:00
|
|
|
|
- Signal handling. There is a bug with join() and signal in
|
|
|
|
|
|
Python
|
2006-10-31 22:25:48 +00:00
|
|
|
|
- Better debugging output for "fail2ban-regex"
|
|
|
|
|
|
- Added support for more date format
|
2006-10-31 23:36:59 +00:00
|
|
|
|
- cPickle does not work with Python 2.5. Use pickle instead
|
|
|
|
|
|
(performance is not a problem in our case)
|
2006-10-01 21:23:22 +00:00
|
|
|
|
|
2006-09-28 19:37:18 +00:00
|
|
|
|
ver. 0.7.3 (2006/09/28) - beta
|
2006-09-12 21:40:19 +00:00
|
|
|
|
----------
|
|
|
|
|
|
- Added man pages. Thanks to Yaroslav Halchenko
|
2006-09-13 21:31:22 +00:00
|
|
|
|
- Added wildcard support for "logpath"
|
2006-09-14 22:05:32 +00:00
|
|
|
|
- Added Gamin (file and directory monitoring system) support
|
2006-09-17 22:03:07 +00:00
|
|
|
|
- (Re)added "ignoreip" option
|
|
|
|
|
|
- Added more concurrency protection
|
2006-09-25 17:06:00 +00:00
|
|
|
|
- First attempt at solving bug #1457620 (locale issue)
|
2006-09-21 22:41:21 +00:00
|
|
|
|
- Performance improvements
|
2006-09-25 20:46:37 +00:00
|
|
|
|
- (Re)added permanent banning with banTime < 0
|
2006-09-27 20:32:30 +00:00
|
|
|
|
- Added DNS support to "ignoreip". Feature Request #1285859
|
2006-09-12 21:40:19 +00:00
|
|
|
|
|
2006-09-10 20:53:21 +00:00
|
|
|
|
ver. 0.7.2 (2006/09/10) - beta
|
2006-08-28 20:23:46 +00:00
|
|
|
|
----------
|
|
|
|
|
|
- Refactoring and code cleanup
|
|
|
|
|
|
- Improved client output
|
2006-08-28 21:39:12 +00:00
|
|
|
|
- Added more get/set commands
|
2006-08-30 22:16:52 +00:00
|
|
|
|
- Added more configuration templates
|
2006-09-04 19:21:01 +00:00
|
|
|
|
- Removed "logpath" and "maxretry" from filter templates.
|
|
|
|
|
|
They must be defined in jail.conf now
|
|
|
|
|
|
- Added interactive mode. Use "-i"
|
2006-09-05 21:16:28 +00:00
|
|
|
|
- Added a date detector. "timeregex" and "timepattern" are no
|
|
|
|
|
|
more needed
|
2006-09-06 18:25:11 +00:00
|
|
|
|
- Added "fail2ban-regex". This is a tool to help finding
|
|
|
|
|
|
"failregex"
|
2006-09-07 22:25:49 +00:00
|
|
|
|
- Improved server communication. Start a new thread for each
|
2006-09-10 20:53:21 +00:00
|
|
|
|
incoming request. Fail2ban is not really thread-safe yet
|
2006-08-28 20:23:46 +00:00
|
|
|
|
|
2006-08-23 21:03:47 +00:00
|
|
|
|
ver. 0.7.1 (2006/08/23) - alpha
|
|
|
|
|
|
----------
|
|
|
|
|
|
- Fixed daemon mode bug
|
|
|
|
|
|
- Added Gentoo init.d script
|
|
|
|
|
|
- Fixed path bug when trying to start "fail2ban-server"
|
|
|
|
|
|
- Fixed reload command
|
|
|
|
|
|
|
2006-08-22 22:20:09 +00:00
|
|
|
|
ver. 0.7.0 (2006/08/23) - alpha
|
2006-07-08 16:51:14 +00:00
|
|
|
|
----------
|
|
|
|
|
|
- Almost a complete rewrite :) Fail2ban design is really
|
|
|
|
|
|
better (IMHO). There is a lot of new features
|
|
|
|
|
|
- Client/Server architecture
|
|
|
|
|
|
- Multithreading. Each jail has its own threads: one for the
|
|
|
|
|
|
log reading and another for the actions
|
|
|
|
|
|
- Execute several actions
|
|
|
|
|
|
- Split configuration files. They are more readable and easy
|
|
|
|
|
|
to use
|
2006-08-06 21:18:44 +00:00
|
|
|
|
- failregex uses group (<host>) now. This feature was already
|
|
|
|
|
|
present in the Debian package
|
2006-08-22 22:20:09 +00:00
|
|
|
|
- lots of things...
|
2006-07-08 16:51:14 +00:00
|
|
|
|
|
2006-03-15 23:07:12 +00:00
|
|
|
|
ver. 0.6.1 (2006/03/16) - stable
|
2005-12-16 23:43:46 +00:00
|
|
|
|
----------
|
|
|
|
|
|
- Added permanent banning. Set banTime to a negative value to
|
|
|
|
|
|
enable this feature (-1 is perfect). Thanks to Mannone
|
|
|
|
|
|
- Fixed locale bug. Thanks to Fernando José
|
2005-12-16 23:51:59 +00:00
|
|
|
|
- Fixed crash when time format does not match data
|
2005-12-27 15:09:50 +00:00
|
|
|
|
- Propagated patch from Debian to fix fail2ban search path
|
|
|
|
|
|
addition to the path search list: now it is added first.
|
|
|
|
|
|
Thanks to Nick Craig-Wood
|
2006-01-03 15:14:27 +00:00
|
|
|
|
- Added SMTP authentification for mail notification. Thanks
|
|
|
|
|
|
to Markus Hoffmann
|
|
|
|
|
|
- Removed debug mode as it is confusing for people
|
|
|
|
|
|
- Added parsing of timestamp in TAI64N format (#1275325).
|
|
|
|
|
|
Thanks to Mark Edgington
|
|
|
|
|
|
- Added patch #1382936 (Default formatted syslog logging).
|
2006-09-04 19:21:01 +00:00
|
|
|
|
Thanks to Patrick B<>rjesson
|
2006-01-12 16:20:00 +00:00
|
|
|
|
- Removed 192.168.0.0/16 from ignoreip. Attacks could also
|
|
|
|
|
|
come from the local network.
|
2006-01-22 11:08:42 +00:00
|
|
|
|
- Robust startup: if iptables module does not get fully
|
|
|
|
|
|
initialized after startup of fail2ban, fail2ban will do
|
|
|
|
|
|
"maxreinit" attempts to initialize its own firewall. It
|
|
|
|
|
|
will sleep between attempts for "polltime" number of
|
|
|
|
|
|
seconds (closes Debian: #334272). Thanks to Yaroslav
|
|
|
|
|
|
Halchenko
|
|
|
|
|
|
- Added "interpolations" in fail2ban.conf. This is provided
|
|
|
|
|
|
by the ConfigParser module. Old configuration files still
|
|
|
|
|
|
work. Thanks to Yaroslav Halchenko
|
|
|
|
|
|
- Added initial support for hosts.deny and shorewall. Need
|
|
|
|
|
|
more testing. Please test. Thanks to kojiro from Gentoo
|
|
|
|
|
|
forum for hosts.deny support
|
2006-02-11 15:30:04 +00:00
|
|
|
|
- Added support for vsftpd. Thanks to zugeschmiert
|
2005-12-16 23:43:46 +00:00
|
|
|
|
|
2005-11-20 17:07:47 +00:00
|
|
|
|
ver. 0.6.0 (2005/11/20) - stable
|
2005-07-01 09:30:52 +00:00
|
|
|
|
----------
|
2005-11-20 17:07:47 +00:00
|
|
|
|
- Propagated patches introduced by Debian maintainer
|
|
|
|
|
|
(Yaroslav Halchenko):
|
|
|
|
|
|
* Added an option to report local time (including timezone)
|
|
|
|
|
|
or GMT in mail notification.
|
|
|
|
|
|
|
|
|
|
|
|
ver. 0.5.5 (2005/10/26) - beta
|
|
|
|
|
|
----------
|
|
|
|
|
|
- Propagated patches introduced by Debian maintainer
|
|
|
|
|
|
(Yaroslav Halchenko):
|
|
|
|
|
|
* Introduced fwcheck option to verify consistency of the
|
|
|
|
|
|
chains. Implemented automatic restart of fail2ban main
|
|
|
|
|
|
function in case check of fwban or fwunban command failed
|
|
|
|
|
|
(closes: #329163, #331695). (Introduced patch was further
|
|
|
|
|
|
adjusted by upstream author).
|
|
|
|
|
|
* Added -f command line parameter for [findtime].
|
|
|
|
|
|
* Added a cleanup of firewall rules on emergency shutdown
|
|
|
|
|
|
when unknown exception is catched.
|
|
|
|
|
|
* Fail2ban should not crash now if a wrong file name is
|
|
|
|
|
|
specified in config.
|
|
|
|
|
|
* reordered code a bit so that log targets are setup right
|
|
|
|
|
|
after background and then only loglevel (verbose, debug)
|
|
|
|
|
|
is processed, so the warning could be seen in the logs
|
|
|
|
|
|
* Added a keyword <section> in parsing of the subject and
|
|
|
|
|
|
the body of an email sent out by fail2ban (closes:
|
|
|
|
|
|
#330311)
|
|
|
|
|
|
|
|
|
|
|
|
ver. 0.5.4 (2005/09/13) - beta
|
|
|
|
|
|
----------
|
|
|
|
|
|
- Fixed bug #1286222.
|
|
|
|
|
|
- Propagated patches introduced by Debian maintainer
|
|
|
|
|
|
(Yaroslav Halchenko):
|
|
|
|
|
|
* Fixed handling of SYSLOG logging target. Now it can log
|
|
|
|
|
|
to any SYSLOG target and facility as directed by the
|
|
|
|
|
|
config
|
|
|
|
|
|
* Format of SYSLOG entries fixed to look closer to standard
|
|
|
|
|
|
* Fixed errata in config/gentoo-confd
|
|
|
|
|
|
* Introduced findtime configuration variable to control the
|
|
|
|
|
|
lifetime of caught "failed" log entries
|
|
|
|
|
|
|
|
|
|
|
|
ver. 0.5.3 (2005/09/08) - beta
|
|
|
|
|
|
----------
|
|
|
|
|
|
- Fixed a bug when overriding "maxfailures" or "bantime".
|
|
|
|
|
|
Thanks to Yaroslav Halchenko
|
|
|
|
|
|
- Added more debug output if an error occurs when sending
|
|
|
|
|
|
mail. Thanks to Stephen Gildea
|
|
|
|
|
|
- Renamed "maxretry" to "maxfailures" and changed default
|
|
|
|
|
|
value to 5. Thanks to Stephen Gildea
|
|
|
|
|
|
- Hopefully fixed bug #1256075
|
|
|
|
|
|
- Fixed bug #1262345
|
|
|
|
|
|
- Fixed exception handling in PIDLock
|
|
|
|
|
|
- Removed warning when using "-V" or "-h" with no config
|
|
|
|
|
|
file. Thanks to Yaroslav Halchenko
|
|
|
|
|
|
- Removed "-i eth0" from config file. Thanks to Yaroslav
|
|
|
|
|
|
Halchenko
|
|
|
|
|
|
|
|
|
|
|
|
ver. 0.5.2 (2005/08/06) - beta
|
|
|
|
|
|
----------
|
|
|
|
|
|
- Better PID lock file handling. Should close #1239562
|
|
|
|
|
|
- Added man pages
|
|
|
|
|
|
- Removed log4py dependency. Use logging module instead
|
|
|
|
|
|
- "maxretry" and "bantime" can be overridden in each section
|
|
|
|
|
|
- Fixed bug #1246278 (excessive memory usage)
|
|
|
|
|
|
- Fixed crash on wrong option value in configuration file
|
|
|
|
|
|
- Changed custom chains to lowercase
|
|
|
|
|
|
|
|
|
|
|
|
ver. 0.5.1 (2005/07/23) - beta
|
|
|
|
|
|
----------
|
|
|
|
|
|
- Fixed bugs #1241756, #1239557
|
|
|
|
|
|
- Added log targets in configuration file. Removed -l option
|
|
|
|
|
|
- Changed iptables rules in order to create a separated chain
|
|
|
|
|
|
for each section
|
|
|
|
|
|
- Fixed static banList in firewall.py
|
|
|
|
|
|
- Added an initd script for Debian. Thanks to Yaroslav
|
|
|
|
|
|
Halchenko
|
|
|
|
|
|
- Check for obsolete files after install
|
|
|
|
|
|
|
|
|
|
|
|
ver. 0.5.0 (2005/07/12) - beta
|
|
|
|
|
|
----------
|
|
|
|
|
|
- Added support for CIDR mask in ignoreip
|
|
|
|
|
|
- Added mail notification support
|
|
|
|
|
|
- Fixed bug #1234699
|
|
|
|
|
|
- Added tags replacement in rules definition. Should allow a
|
|
|
|
|
|
clean solution for Feature Request #1229479
|
|
|
|
|
|
- Removed "interface" and "firewall" options
|
|
|
|
|
|
- Added start and end commands in the configuration file.
|
|
|
|
|
|
Thanks to Yaroslav Halchenko
|
|
|
|
|
|
- Added firewall rules definition in the configuration file
|
|
|
|
|
|
- Cleaned fail2ban.py
|
2005-07-01 09:30:52 +00:00
|
|
|
|
- Added an initd script for RedHat/Fedora. Thanks to Andrey
|
|
|
|
|
|
G. Grozin
|
|
|
|
|
|
|
2005-11-20 17:07:47 +00:00
|
|
|
|
ver. 0.4.1 (2005/06/30) - stable
|
2005-06-30 09:30:59 +00:00
|
|
|
|
----------
|
|
|
|
|
|
- Fixed textToDNS method which generated wrong matches for
|
|
|
|
|
|
"rhost=12-xyz...". Thanks to Tom Pike
|
|
|
|
|
|
- fail2ban.conf modified for readability. Thanks to Iain Lea
|
|
|
|
|
|
- Added an initd script for Gentoo
|
|
|
|
|
|
- Changed default PID lock file location from /tmp to
|
|
|
|
|
|
/var/run
|
|
|
|
|
|
|
2005-11-20 17:07:47 +00:00
|
|
|
|
ver. 0.4.0 (2005/04/24) - stable
|
2005-04-03 12:12:52 +00:00
|
|
|
|
----------
|
|
|
|
|
|
- Fixed textToDNS which did not recognize strings like
|
|
|
|
|
|
"12-345-67-890.abcd.mnopqr.xyz"
|
|
|
|
|
|
|
2005-11-20 17:07:47 +00:00
|
|
|
|
ver. 0.3.1 (2005/03/31) - beta
|
2005-03-06 17:42:59 +00:00
|
|
|
|
----------
|
|
|
|
|
|
- Corrected level of messages
|
|
|
|
|
|
- Added DNS lookup support
|
|
|
|
|
|
- Improved parsing speed. Only parse the new log messages
|
2005-03-30 22:48:38 +00:00
|
|
|
|
- Added a second verbose level (-vv)
|
2005-03-06 17:42:59 +00:00
|
|
|
|
|
2005-11-20 17:07:47 +00:00
|
|
|
|
ver. 0.3.0 (2005/02/24) - beta
|
2005-02-18 13:30:54 +00:00
|
|
|
|
----------
|
|
|
|
|
|
- Re-writting of parts of the code in order to handle several
|
|
|
|
|
|
log files with different rules
|
|
|
|
|
|
- Removed sshd.py because it is no more needed
|
2005-02-18 21:46:56 +00:00
|
|
|
|
- Fixed a bug when exiting with IP in the ban list
|
2005-02-20 13:34:43 +00:00
|
|
|
|
- Added PID lock file
|
|
|
|
|
|
- Improved some parts of the code
|
2005-02-22 21:11:46 +00:00
|
|
|
|
- Added ipfw-start-rule option (thanks to Robert Edeker)
|
2005-02-23 16:56:29 +00:00
|
|
|
|
- Added -k option which kills a currently running Fail2Ban
|
2005-02-18 13:30:54 +00:00
|
|
|
|
|
2005-11-20 17:07:47 +00:00
|
|
|
|
ver. 0.1.2 (2004/11/21) - beta
|
2004-11-06 14:05:09 +00:00
|
|
|
|
----------
|
|
|
|
|
|
- Add ipfw and ipfwadm support. The rules are taken from
|
|
|
|
|
|
BlockIt. Thanks to Robert Edeker
|
|
|
|
|
|
- Add -e option which allows to set the interface. Thanks to
|
|
|
|
|
|
Robert Edeker who reminded me this
|
|
|
|
|
|
- Small code cleaning
|
|
|
|
|
|
|
2005-11-20 17:07:47 +00:00
|
|
|
|
ver. 0.1.1 (2004/10/23) - beta
|
2004-10-14 10:28:04 +00:00
|
|
|
|
----------
|
2004-10-18 20:54:29 +00:00
|
|
|
|
- Add SIGTERM handler in order to exit nicely when in daemon
|
|
|
|
|
|
mode
|
2004-10-14 10:28:04 +00:00
|
|
|
|
- Add -r option which allows to set the maximum number of
|
|
|
|
|
|
login failures
|
|
|
|
|
|
- Remove the Metalog class as the log file are not so syslog
|
|
|
|
|
|
daemon specific
|
|
|
|
|
|
- Rewrite log reader to be service centered. Sshd support
|
|
|
|
|
|
added. Match "Failed password" and "Illegal user"
|
2004-10-16 22:18:25 +00:00
|
|
|
|
- Add /etc/fail2ban.conf configuration support
|
2004-10-14 10:28:04 +00:00
|
|
|
|
- Code documentation
|
|
|
|
|
|
|
|
|
|
|
|
|
2005-11-20 17:07:47 +00:00
|
|
|
|
ver. 0.1.0 (2004/10/12) - alpha
|
2004-10-12 21:45:41 +00:00
|
|
|
|
----------
|
|
|
|
|
|
- Initial release
|
