Sergey G. Brester
3c8d5fd4ef
Update ChangeLog
2 years ago
Sergey G. Brester
212a4c236a
update changeLog, nginx-forbidden, gh-2226
2 years ago
Sergey G. Brester
3d4bed50c2
changelog entry (gh-3479)
2 years ago
Duncan Bellamy
b892133d51
move new comment in changelog
2 years ago
Duncan Bellamy
9997807fb3
Add action for mikrotik routerOS
2 years ago
sebres
ed135b6a93
changelog entries (gh-3438, gh-3132)
2 years ago
sebres
eba33d6205
version bump
2 years ago
sebres
e1d3006b03
update 1.0.2 -- finally-war-game-test-tape-not-a-nuclear-alarm
2 years ago
sebres
fd3805b40a
changelog: backend `systemd`: code review and several fixes
2 years ago
sebres
d8e2b03a24
`filter.d/named-refused.conf` extended (closes gh-3388):
...
- support BIND named log categories
- allow `info:` as possible error prefix too ("query (cache) denied" may occur as info)
2 years ago
sebres
ca2b94c522
fixes gh-3370: resolve extremely long search by repeated apply of non-greedy RE `(?:: (?:[^\(]+|\w+\([^\)]*\))+)?` with following branches (it may be extremely slow up to infinite search depending on message); added new regression tests
...
amend to gh-3210: fixes regression and matches new format in aggressive mode too
2 years ago
sebres
f8fcaf943b
version bump
2 years ago
sebres
677da51562
release 1.0.1 -- energy-equals-mass-times-the-speed-of-light-squared
2 years ago
sebres
bd94b7a47d
make up leeway of ChangeLog (prepare release of 1.0)
2 years ago
sebres
d6896eb26d
New logtarget: systemd-journal;
...
rebased #1403 from da2x:feature-systemd-journal
2 years ago
Logic-32
7e7b9f4a35
Adding support for Cloudflare Token API.
...
Closes #3080
3 years ago
Viktor Szépe
45e08cc07f
Render Changelog as Markdown
3 years ago
Sergey G. Brester
8e62c8a569
syntax
3 years ago
sebres
b903059419
ChangeLog for RFE gh-3217 (with compat warning)
3 years ago
sebres
ff7fe572bf
drop support for python 2.6 (hardly possible in modern CIs, new features would expect OrderedDicts, etc)
3 years ago
Sylvestre Ledru
1cd3118da3
Fix typo found by lintian (Debian static analyzer)
3 years ago
Sergey G. Brester
2958ad8636
Update ChangeLog
4 years ago
Sergey G. Brester
c5d43d7573
Update ChangeLog
4 years ago
sebres
4b17dddc23
update ChangeLog
4 years ago
sebres
abc5a4e062
ChangeLog ( #2742 )
4 years ago
stepodev
d0ba27cf46
move nginx-tls-fallback rules to nginx-http-auth
4 years ago
stepodev
27c40a77a3
add nginx-tls-downgrade
4 years ago
sebres
eea1881b73
release 0.11.2 -- heal-the-world-with-security-tools
4 years ago
sebres
e768f8637a
release 0.10.6 -- just what the doctor ordered
4 years ago
sebres
79b61e009a
ChangeLog
4 years ago
benrubson
840f0ff10a
Add Grafana jail
4 years ago
Mart124
df659a0cbc
Add Bitwarden syslog support
4 years ago
benrubson
ec873e2dc3
Add SoftEtherVPN jail
4 years ago
sebres
1418bcdf5b
`action.d/bsd-ipfw.conf`: fixed selection of rule-no by large list or initial `lowest_rule_num`, exit code can't be larger than 255 (gh-2836)
4 years ago
sebres
a038fd5dfe
`action.d/firewallcmd-*.conf` (multiport only): fixed port range selector, replacing `:` with `-`;
...
small optimizations on `firewallcmd-rich-rules.conf` and `firewallcmd-rich-logging.conf` simplifying both and provide a dependency (rich-logging is a derivative of rich-rules);
closes gh-2821
4 years ago
sebres
f09ba1b399
action in jail-config extended to consider space as separator now (splitWithOptions separates by space between mains words, but not in options), so defining `action = a b` would specify 2 actions `a` and `b`;
...
it is additionally more precise now (see fixed typo with closed bracket `]` instead of comma in testServerReloadTest)
4 years ago
sebres
a3a148078e
fail2ban-regex: more informative output for `datepattern` (e. g. set from filter) - pattern : description, example:
...
Use datepattern : ^%Y-%m-%d %H:%M:%S : ^Year-Month-Day 24hour:Minute:Second
4 years ago
sebres
17a6ba44b3
fail2ban-regex: speedup formatted output (bypass unneeded stats creation);
...
fail2ban-regex: extended with prefregex statistic
4 years ago
sebres
2945fe8cbd
changelog
4 years ago
sebres
295630cccf
documentation and changelog
4 years ago
sebres
7d172faa50
implements gh-2791: fail2ban-client extended to unban IP range(s) by subnet (CIDR/mask) or hostname (DNS)
4 years ago
sebres
98983adf76
update ChangeLog
4 years ago
sebres
5a0edf61c9
filter.d/sshd.conf: normalizing of user pattern in all RE's, allowing empty user (gh-2749)
5 years ago
Sergey G. Brester
42aef09d69
Update ChangeLog
5 years ago
Sergey G. Brester
da1652d0d7
Update ChangeLog
5 years ago
sebres
6b90ca820f
filter.d/traefik-auth.conf: filter extended with parameter mode (`normal`, `ddos`, `aggressive`) to handle the match of username differently:
...
- `normal`: matches 401 with supplied username only
- `ddos`: matches 401 without supplied username only
- `aggressive`: matches 401 and any variant (with and without username)
closes gh-2693
5 years ago
sebres
affd9cef5f
filter.d/courier-smtp.conf: prefregex extended to consider port in log-message (closes gh-2697)
5 years ago
sebres
06b46e92eb
jail.conf: don't specify `action` directly in jails (use `action_` or `banaction` instead);
...
no mails-action added per default anymore (e. g. to allow that `action = %(action_mw)s` should be specified per jail or in default section in jail.local), closes gh-2357;
ensure we've unique action name per jail (also if parameter `actname` is not set but name deviates from standard name, gh-2686);
don't use %(banaction)s interpolation because it can be complex value (containing `[...]`), so would bother the action interpolation.
5 years ago
Sergey G. Brester
78651de7e5
Update ChangeLog
5 years ago
sebres
bc2b81133c
pyinotify backend: guarantees initial scanning of log-file by start (retarded via pending event if filter not yet active)
5 years ago