From fc76ccf19218f7eb14afcbf916fe47c3c9ccaa95 Mon Sep 17 00:00:00 2001 From: Luis Aranguren Date: Mon, 2 Apr 2018 21:35:13 +1000 Subject: [PATCH 1/2] Fixes abuseipdb curl cypher error and comment $f2bV_matches Fixed https://github.com/fail2ban/fail2ban/issues/2044 #2044 and used https://github.com/fail2ban/fail2ban/issues/2039 to fix comment in abuseipdb.com only showing $f2bV_matches --- config/action.d/abuseipdb.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/action.d/abuseipdb.conf b/config/action.d/abuseipdb.conf index 15e41fbe..279c299e 100644 --- a/config/action.d/abuseipdb.conf +++ b/config/action.d/abuseipdb.conf @@ -86,7 +86,7 @@ actioncheck = # Tags: See jail.conf(5) man page # Values: CMD # -actionban = curl --fail --ciphers ecdhe_ecdsa_aes_256_sha --data 'key=' --data-urlencode 'comment=' --data 'ip=' --data 'category=' "https://www.abuseipdb.com/report/json" +actionban = lgm=$(printf '%%s\n...' ""); curl --fail --tlsv1.1 --data "key=" --data-urlencode "comment=$lgm" --data "ip=" --data "category=" "https://www.abuseipdb.com/report/json" # Option: actionunban # Notes.: command executed when unbanning an IP. Take care that the From d9525ad3aafb3a3a3387e402fcb965a730cf6a97 Mon Sep 17 00:00:00 2001 From: "Sergey G. Brester" Date: Wed, 4 Apr 2018 16:47:18 +0200 Subject: [PATCH 2/2] Update ChangeLog --- ChangeLog | 1 + 1 file changed, 1 insertion(+) diff --git a/ChangeLog b/ChangeLog index e4f89c02..9c424962 100644 --- a/ChangeLog +++ b/ChangeLog @@ -47,6 +47,7 @@ ver. 0.10.3-dev-1 (20??/??/??) - development edition - amend to gh-1263 with better handling of multiple attempts (failures for different user-names recognized immediatelly); - mode `ddos` (and `aggressive`) extended to catch `Connection closed by ... [preauth]`, so in DDOS mode it counts failure on closing connection within preauth-stage (gh-2085); +* `action.d/abuseipdb.conf`: fixed curl cypher errors and comment quote-issue (gh-2044, gh-2101); * `action.d/badips.py`: implicit convert IPAddr to str, solves an issue "expected string, IPAddr found" (gh-2059); * `action.d/hostsdeny.conf`: fixed IPv6 syntax (enclosed in square brackets, gh-2066); * (Free)BSD ipfw actionban fixed to allow same rule added several times (gh-2054);