github
/
fail2ban
mirror of https://github.com/fail2ban/fail2ban
1
0
Fork 0
Code Issues Releases Wiki Activity

Update changelog and man/jail.conf.5

pull/1750/head
sebres 2017-08-08 21:50:38 +02:00
parent 9a768c19d0
commit 6f4fde2c29
2 changed files with 14 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
ChangeLog
View File

@ -134,6 +134,13 @@ TODO: implementing of options resp. other tasks from PR #1346
Hence `%z` currently match literal Z|UTC|GMT only (and offset-based), and `%Exz` - all zone Hence `%z` currently match literal Z|UTC|GMT only (and offset-based), and `%Exz` - all zone
abbreviations. abbreviations.
* `filter.d/courier-auth.conf`: support failed logins with method only * `filter.d/courier-auth.conf`: support failed logins with method only
* Config reader's: introduced new syntax `%(section/option)s`, in opposite to extended interpolation of
python 3 `${section:option}` work with all supported python version in fail2ban and this syntax is
like our another features like `%(known/option)s`, etc. (gh-1750)
* Variable `default_backend` switched to `%(default/backend)s`, so totally backwards compatible now,
but now the setting of parameter `backend` in default section of `jail.local` can overwrite default
backend also (see gh-1750). In the future versions parameter `default_backend` can be removed (incompatibility,
possibly some distributions affected).
ver. 0.10.0-alpha-1 (2016/07/14) - ipv6-support-etc ver. 0.10.0-alpha-1 (2016/07/14) - ipv6-support-etc

9
man/jail.conf.5
View File

@ -90,11 +90,16 @@ indicates that the specified file is to be parsed after the current file.
.RE .RE
Using Python "string interpolation" mechanisms, other definitions are allowed and can later be used within other definitions as %(name)s. Using Python "string interpolation" mechanisms, other definitions are allowed and can later be used within other definitions as %(name)s.
Additionally fail2ban has an extended interpolation feature named \fB%(known/parameter)s\fR (means last known option with name \fBparameter\fR). This interpolation makes possible to extend a stock filter or jail regexp in .local file (opposite to simply set failregex/ignoreregex that overwrites it), e.g.
Fail2ban has more advanced syntax (similar python extended interpolation). This extended interpolation is using \fB%(section/parameter)s\fR to denote a value from a foreign section.
.br
Besides cross section interpolation the value of parameter in \fI[DEFAULT]\fR section can be retrieved with \fB%(default/parameter)s\fR.
.br
Fail2ban supports also another feature named \fB%(known/parameter)s\fR (means last known option with name \fBparameter\fR). This interpolation makes possible to extend a stock filter or jail regexp in .local file (opposite to simply set failregex/ignoreregex that overwrites it), e.g.
.RS .RS
.nf .nf
baduseragents = IE|wget baduseragents = IE|wget|%(my-settings/baduseragents)s
failregex = %(known/failregex)s failregex = %(known/failregex)s
useragent=%(baduseragents)s useragent=%(baduseragents)s
.fi .fi