Commit Graph

5530 Commits (0.11)
 

Author SHA1 Message Date
Sergey G. Brester 1434e3089c
Merge pull request #2455 from Thermi/improved-action-blocklist-de
7 months ago
sebres 94dac78afe Merge branch '0.10' into 0.11
2 years ago
sebres 485c50228a explicitly close cursor if not needed anymore (GC can grab it late)
2 years ago
sebres 45ef36276f fixes gh-3352: failed update of database didn't signal with an error
2 years ago
sebres 8dccf099e4 Merge branch '0.10' into 0.11
2 years ago
sebres 5e74499ffd provides details of failed regex compilation in the error message we throw in Regex-constructor (it's good to know what exactly is wrong)
2 years ago
sebres 467024797f Merge branch '0.10' into 0.11
2 years ago
sebres 35eb9acaee Merge branch 'test-gh-3334' into 0.10 - speedup daemonization process by huge open files limit
2 years ago
sebres 476136281c Revert "check large nofile limit issue (#3334)" (back to original open files limit)
2 years ago
sebres 38026e5963 code review (replace deprecated setter, since python 3.10)
2 years ago
sebres 535a982dcc fixes #3334: speedup daemonization process by huge open files limit (try to close open file descriptors obtained from `/proc/self/fd` or `/proc/fd`)
2 years ago
Sergey G. Brester 24b1dea197 check large nofile limit issue (#3334)
2 years ago
Sergey G. Brester bcac47d549
Merge pull request #3324 from fail2ban/patch-sendmail-no-user-part
2 years ago
Sergey G. Brester 514cca9ade
filter.d/sendmail-auth.conf: detect failures without user part
2 years ago
Sergey G. Brester 3a8ab0c70a
sendmail-auth: coverage for auth-failure without user part
2 years ago
sebres c6cfd761bb Merge remote-tracking branch 'remotes/gh-upstream/0.10' into 0.11
2 years ago
Sergey G. Brester 7ba8f437f1
Merge pull request #3267 from fail2ban/py-3.11-a7
2 years ago
sebres 5d9d86e2f4 GHA: update python 3.11 version (3.11.0-beta.3)
2 years ago
sebres 15f5c36a17 skip test if readline module missing (add it as optional module installs in GHA workflow)
2 years ago
sebres 4337e36616 wrap global flags like ((?i)xxx) or (?:(?i)xxx) to local flags (?i:xxx) if supported by RE-engine in the python version
2 years ago
sebres 7e2ab36d86 move global groups to start of expression (python 3.11 compat)
2 years ago
Sergey G. Brester 500895dcfa GHA: update python 3.11 version
2 years ago
Sergey G. Brester a7ade07bf4
fixes typo (copy&paste) by logging of flush impossibility at consistency check, #3306
2 years ago
sebres a69d42cea5 Merge branch '0.10' into 0.11
3 years ago
sebres 5aeb49a620 systemd backend: fixes missing space in message (tag `<matches>`) between timestamp and host if the message read from systemd journal;
3 years ago
Sergey G. Brester fbfc85d8c0
common.conf: fixed typo in comment (rfc5424 for logtype)
3 years ago
sebres 8c4d02403b Merge branch '0.10' into 0.11
3 years ago
sebres e2d50f38a6 amend to #2279: ensure that `<F-MLFGAINED>` match would reset all pending multi-line failures
3 years ago
sebres 7eac4ac06f fail2ban-regex: accepts filter parameters with new-line
3 years ago
sebres 8ac49b5858 Merge branch '0.10' into 0.11
3 years ago
László Károlyi f380d6202d cherry pick #3210 from master
3 years ago
sebres cdb6a46945 systemd backend: better avoidance of landing in dead space by seeks over journals;
3 years ago
sebres 498e473a10 filter.d/courier-auth.conf: consider optional port after IP, regex is rewritten without catch-all's and right anchor, so it is more stable against further modifications now;
3 years ago
sebres 8013cf0b90 python actions have no attribute 'consistencyCheck' by default;
3 years ago
sebres 810386a265 filter.d/dovecot.conf: parse everything in parenthesis by auth-worker info, e. g. can match (pid=...,uid=...) too
3 years ago
sebres c7ae74ce17 amend to a147a8b0e1b2f32b6f191932afd3c2db9765e2e3: systemd journal test-cases - additional check appropriate default settings (if testing as not root/sudoer)
3 years ago
sebres 35d73d9758 Merge branch '0.10' into 0.11
3 years ago
sebres bf689c27b8 filter.d/sshd.conf: `ddos` mode extended - recognizes messages "kex_exchange_identification: Connection closed / reset by pear" (fixed possible regression of f77398c49d);
3 years ago
sebres 8bf15db688 filter.d/sshd.conf: `ddos` mode extended - recognizes new message "banner exchange: invalid format" generated by port scanner, https payload on ssh port;
3 years ago
Sergey G. Brester ea7bbb4757
Merge pull request #2182 from orlitzky/openrc-improvements
3 years ago
Sergey G. Brester 8f83242c25
suppress unneeded info (moved to debug level)
3 years ago
sebres 3fb02527a4 Merge branch '0.10' into 0.11
3 years ago
sebres 25a61ce632 Merge branch 'gh-actions--test-systemd' into 0.10 + several revisions cherry-picked from 0.11/master
3 years ago
sebres 21d94ff178 amend to fix gh-3098: no option `--disable-2to3` anymore
3 years ago
sebres 196c55e931 fix gh-3098: build fails with error in fail2ban setup command: use_2to3 is invalid (setuptools 58+)
3 years ago
sebres 0fa76ef75a gh-actions: temporary ignore tests of systemd backend for python >= v.3.10 (otherwise it fails with "PY_SSIZE_T_CLEAN macro must be defined for '#' formats")
3 years ago
sebres a147a8b0e1 gh-actions: coverage for systemd backend (to monitor journals in test-suite in GHA-env we need to use 0 as default flags, because otherwise it cannot be found using SYSTEM_ONLY(4))
3 years ago
sebres 1bcb62e31c gh-actions: python releases upgrade + debug/test systemd backend availability in GHA
3 years ago
sebres a57643404c mytime.seconds2str: small amend with speed-up, code simplification and few tests
3 years ago
sebres 4fe4ac8dde amend to merge: replace timedelta string representation with new function seconds2str
3 years ago