From 6f4fde2c29743286907fec5c5afc5fb11122401f Mon Sep 17 00:00:00 2001 From: sebres Date: Tue, 8 Aug 2017 21:50:38 +0200 Subject: [PATCH] Update changelog and man/jail.conf.5 --- ChangeLog | 7 +++++++ man/jail.conf.5 | 9 +++++++-- 2 files changed, 14 insertions(+), 2 deletions(-) diff --git a/ChangeLog b/ChangeLog index 32f7b521..2672889a 100644 --- a/ChangeLog +++ b/ChangeLog @@ -134,6 +134,13 @@ TODO: implementing of options resp. other tasks from PR #1346 Hence `%z` currently match literal Z|UTC|GMT only (and offset-based), and `%Exz` - all zone abbreviations. * `filter.d/courier-auth.conf`: support failed logins with method only +* Config reader's: introduced new syntax `%(section/option)s`, in opposite to extended interpolation of + python 3 `${section:option}` work with all supported python version in fail2ban and this syntax is + like our another features like `%(known/option)s`, etc. (gh-1750) +* Variable `default_backend` switched to `%(default/backend)s`, so totally backwards compatible now, + but now the setting of parameter `backend` in default section of `jail.local` can overwrite default + backend also (see gh-1750). In the future versions parameter `default_backend` can be removed (incompatibility, + possibly some distributions affected). ver. 0.10.0-alpha-1 (2016/07/14) - ipv6-support-etc diff --git a/man/jail.conf.5 b/man/jail.conf.5 index a8afe53c..e939771b 100644 --- a/man/jail.conf.5 +++ b/man/jail.conf.5 @@ -90,11 +90,16 @@ indicates that the specified file is to be parsed after the current file. .RE Using Python "string interpolation" mechanisms, other definitions are allowed and can later be used within other definitions as %(name)s. -Additionally fail2ban has an extended interpolation feature named \fB%(known/parameter)s\fR (means last known option with name \fBparameter\fR). This interpolation makes possible to extend a stock filter or jail regexp in .local file (opposite to simply set failregex/ignoreregex that overwrites it), e.g. + +Fail2ban has more advanced syntax (similar python extended interpolation). This extended interpolation is using \fB%(section/parameter)s\fR to denote a value from a foreign section. +.br +Besides cross section interpolation the value of parameter in \fI[DEFAULT]\fR section can be retrieved with \fB%(default/parameter)s\fR. +.br +Fail2ban supports also another feature named \fB%(known/parameter)s\fR (means last known option with name \fBparameter\fR). This interpolation makes possible to extend a stock filter or jail regexp in .local file (opposite to simply set failregex/ignoreregex that overwrites it), e.g. .RS .nf -baduseragents = IE|wget +baduseragents = IE|wget|%(my-settings/baduseragents)s failregex = %(known/failregex)s useragent=%(baduseragents)s .fi