diff --git a/ChangeLog b/ChangeLog index f32a1858..cceb88f6 100644 --- a/ChangeLog +++ b/ChangeLog @@ -75,7 +75,20 @@ configuration before relying on it. same jail -- use actname option to disambiguate. * Add honeypot email address to exim-spam filter as argument -ver. 0.8.12 (2014/01/XX) - things-can-only-get-better + +ver. 0.8.13 (2014/XX/XXX) - maintaince-only-from-now-on +---------- + +- Fixes: + - action firewallcmd-ipset had non-working actioncheck. Removed. + redhat bug #1046816. + +- New Features: + +- Enhancements: + +ver. 0.8.12 (2014/01/22) - things-can-only-get-better +---------- - IMPORTANT incompatible changes: - Rename firewall-cmd-direct-new to firewallcmd-new to fit within jail name @@ -148,6 +161,7 @@ ver. 0.8.12 (2014/01/XX) - things-can-only-get-better ver. 0.8.11 (2013/11/13) - loves-unittests-and-tight-DoS-free-filter-regexes +---------- In light of CVE-2013-2178 that triggered our last release we have put a significant effort into tightening all of the regexs of our filters diff --git a/THANKS b/THANKS index d983cf85..32b1958f 100644 --- a/THANKS +++ b/THANKS @@ -30,6 +30,7 @@ Daniel B. Cid Daniel B. Daniel Black David Nutter +Derek Atkins Eric Gerbier Enrico Labedzki ftoppi diff --git a/config/action.d/firewallcmd-ipset.conf b/config/action.d/firewallcmd-ipset.conf index 2c4a36f1..03e30c3c 100644 --- a/config/action.d/firewallcmd-ipset.conf +++ b/config/action.d/firewallcmd-ipset.conf @@ -25,8 +25,6 @@ actionstop = firewall-cmd --direct --remove-rule ipv4 filter 0 -p ipset destroy fail2ban- -actioncheck = firewall-cmd --direct --get-chains ipv4 filter | grep -q '^fail2ban-$' - actionban = ipset add fail2ban- timeout -exist actionunban = ipset del fail2ban- -exist