github
/
fail2ban
mirror of https://github.com/fail2ban/fail2ban
1
0
Fork 0
Code Issues Releases Wiki Activity

amend ChangeLog updated: `ignoreip` extended with `file:...` syntax to ignore IPs from file-ip-set; 

+ silence codespell
pull/3955/head
sebres 2025-03-03 20:05:11 +01:00
parent c54f1a4603
commit 7233edd0bf
2 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
ChangeLog
View File

@ -40,6 +40,11 @@ ver. 1.1.1-dev-1 (20??/??/??) - development nightly edition
### New Features and Enhancements ### New Features and Enhancements
* new jail option `skip_if_nologs` to ignore jail if no `logpath` matches found, fail2ban continue to start with warnings/errors, * new jail option `skip_if_nologs` to ignore jail if no `logpath` matches found, fail2ban continue to start with warnings/errors,
thus other jails become running (gh-2756) thus other jails become running (gh-2756)
* configuration `ignoreip` and fail2ban-client commands `addignoreip`/`delignoreip` extended with `file:...` syntax
to ignore IPs from file-ip-set (containing IP, subnet, dns/fqdn or raw strings); the file would be read lazy on demand,
by first ban (and automatically reloaded by update after small latency to avoid expensive stats check on every compare);
the entries inside the file can be separated by comma, space or new line with optional comments (text following chars
`#` or `;` after space or newline would be ignored up to next newline)
* `action.d/*-ipset.conf`: * `action.d/*-ipset.conf`:
- parameter `ipsettype` to set type of ipset, e. g. hash:ip, hash:net, etc (gh-3760) - parameter `ipsettype` to set type of ipset, e. g. hash:ip, hash:net, etc (gh-3760)
* `action.d/firewallcmd-rich-*.conf` - fixed incorrect quoting, disabling port variable expansion * `action.d/firewallcmd-rich-*.conf` - fixed incorrect quoting, disabling port variable expansion

2
fail2ban/server/ipdns.py
View File

@ -793,7 +793,7 @@ class FileIPAddrSet(IPAddrSet):
return self._shortRepr return self._shortRepr
def __contains__(self, ip): def __contains__(self, ip):
# check it is uptodate (not often than maxUpdateLatency): # check it is up-to-date (not often than maxUpdateLatency):
if self.fileName: if self.fileName:
self.load(ifNeeded=True) self.load(ifNeeded=True)
# inherited contains: # inherited contains: