diff --git a/.gitignore b/.gitignore index 1e3b2ec4..c2e979e5 100644 --- a/.gitignore +++ b/.gitignore @@ -4,3 +4,5 @@ dist *.pyc htmlcov .coverage +*.orig +*.rej diff --git a/MANIFEST b/MANIFEST index d3890034..28063b83 100644 --- a/MANIFEST +++ b/MANIFEST @@ -42,6 +42,7 @@ server/banmanager.py server/datetemplate.py server/mytime.py server/failregex.py +testcases/files/testcase-usedns.log testcases/banmanagertestcase.py testcases/failmanagertestcase.py testcases/clientreadertestcase.py @@ -58,6 +59,7 @@ testcases/files/testcase04.log setup.py setup.cfg common/__init__.py +common/exceptions.py common/helpers.py common/version.py common/protocol.py @@ -89,6 +91,17 @@ config/filter.d/vsftpd.conf config/filter.d/webmin-auth.conf config/filter.d/wuftpd.conf config/filter.d/xinetd-fail.conf +config/filter.d/asterisk.conf +config/filter.d/dovecot.conf +config/filter.d/dropbear.conf +config/filter.d/lighttpd-auth.conf +config/filter.d/recidive.conf +config/filter.d/roundcube-auth.conf +config/action.d/dummy.conf +config/action.d/iptables-ipset-proto4.conf +config/action.d/iptables-ipset-proto6.conf +config/action.d/iptables-xt_recent-echo.conf +config/action.d/route.conf config/action.d/complain.conf config/action.d/dshield.conf config/action.d/hostsdeny.conf @@ -111,6 +124,8 @@ config/action.d/sendmail-whois-lines.conf config/action.d/shorewall.conf config/fail2ban.conf man/fail2ban-client.1 +man/fail2ban.1 +man/jail.conf.5 man/fail2ban-client.h2m man/fail2ban-server.1 man/fail2ban-server.h2m diff --git a/TODO b/TODO index 933134e9..61bdc093 100644 --- a/TODO +++ b/TODO @@ -16,9 +16,9 @@ Legend: - Run tests though all filters/examples files - (see sshd example file) as unit test -- Removed relative imports +* Removed relative imports -- Cleanup fail2ban-client and fail2ban-server. Move code to server/ and client/ +* Cleanup fail2ban-client and fail2ban-server. Move code to server/ and client/ - Add timeout to external commands (signal alarm, watchdog thread, etc) diff --git a/config/action.d/complain.conf b/config/action.d/complain.conf index 6677ec49..4c2de92b 100644 --- a/config/action.d/complain.conf +++ b/config/action.d/complain.conf @@ -52,10 +52,7 @@ actioncheck = # Option: actionban # Notes.: command executed when banning an IP. Take care that the # command is executed with Fail2Ban user rights. -# Tags: IP address -# number of failures -# unix timestamp of the last failure -# unix timestamp of the ban time +# Tags: See jail.conf(5) man page # Values: CMD # actionban = ADDRESSES=`whois | perl -e 'while () { next if /^changed|@(ripe|apnic)\.net/io; $m += (/abuse|trouble:|report|spam|security/io?3:0); if (/([a-z0-9_\-\.+]+@[a-z0-9\-]+(\.[[a-z0-9\-]+)+)/io) { while (s/([a-z0-9_\-\.+]+@[a-z0-9\-]+(\.[[a-z0-9\-]+)+)//io) { if ($m) { $a{lc($1)}=$m } else { $b{lc($1)}=$m } } $m=0 } else { $m && --$m } } if (%%a) {print join(",",keys(%%a))} else {print join(",",keys(%%b))}'` @@ -67,9 +64,7 @@ actionban = ADDRESSES=`whois | perl -e 'while () { next if /^changed # Option: actionunban # Notes.: command executed when unbanning an IP. Take care that the # command is executed with Fail2Ban user rights. -# Tags: IP address -# unix timestamp of the ban time -# unix timestamp of the unban time +# Tags: See jail.conf(5) man page # Values: CMD # actionunban = diff --git a/config/action.d/dshield.conf b/config/action.d/dshield.conf index c581af1c..151db28f 100644 --- a/config/action.d/dshield.conf +++ b/config/action.d/dshield.conf @@ -54,9 +54,7 @@ actioncheck = # Option: actionban # Notes.: command executed when banning an IP. Take care that the # command is executed with Fail2Ban user rights. -# Tags: IP address -# number of failures -#