fail2ban

Commit Graph

Author	SHA1	Message	Date
sebres	e3737bb7c0	filter stability fix: prevent race condition - no ban if filter (backend) is continuously busy if too many messages will be found in log, e. g. initial scan of large log-file or journal (gh-2660)	5 years ago
Sergey G. Brester	d4da9afd7f	Update ChangeLog	5 years ago
sebres	42714d0849	filter.d/common.conf: closes gh-2650, avoid substitute of default values in related `lt_*` section, `__prefix_line` should be interpolated in definition section (after the config considers all sections that can overwrite it); amend to `62b1712d22` (PR #2387, backend-related option `logtype`); testSampleRegexsZZZ-GENERIC-EXAMPLE covering now negative case also (other daemon in prefix line)	5 years ago
sebres	15158e4474	closes gh-2647: add ban to database is moved from jail.putFailTicket to actions.__CheckBan; be sure manual ban is written to database, so can be restored by restart; reload/restart test extended	5 years ago
sebres	4766547e1f	performance optimization of `datepattern` (better search algorithm); datetemplate: improved anchor detection for capturing groups `(^...)`; introduced new prefix `{UNB}` for `datepattern` to disable word boundaries in regex; datedetector: speedup special case if only one template is defined (every match wins - no collision, no sorting, no other best match possible)	5 years ago
Christopher Gurnee	df885586d4	close Popen() pipes explicitly for PyPy Waiting for garbage collection to close pipes opened by Popen() can lead to "Too many open files" errors with PyPy; close them explicitly.	5 years ago
sebres	e57e950ef5	version bump (back to dev)	5 years ago
sebres	8cbc1e0ebb	ChangeLog (change actioncheck behavior)	5 years ago
sebres	bb0f732ae6	version bump (master is 1.0.x-dev now)	5 years ago
sebres	d004a2c79b	release 0.11.1 -- This is the Way	5 years ago
sebres	b25d8565fc	release 0.10.5 -- Deserve more respect a jedi's weapon must. Hrrrm, Yes	5 years ago
sebres	f77398c49d	filter.d/sshd.conf: captures `Disconnected from ... [preauth]`, preauth phase only, different handling by `extra` (with supplied user only) and `ddos`/`aggressive` mode (`normal` mode is not affected, used there just as a helper with `<F-NOFAIL>` to capture IP for multiline failures without IP); closes gh-2115, gh-2362.	5 years ago
sebres	d1b7e2b5fb	fail2ban-regex - several enhancements and fixes: - improved usage output (don't put a long help if an error occurs); - new option `--no-check-all` to avoid check of all regex's (first matched only); - new option `-o`, `--out` to set token provided in output (disables check-all and outputs only expected data); - test cases optimized and extended	5 years ago
sebres	f30b7ae244	update ChangeLog + spelling	5 years ago
sebres	27e6b0021c	ChangeLog update gh-2563	5 years ago
sebres	e5d02bc2e9	grouped tags (`<ADDR>`, `<HOST>`, `<SUBNET>`) recognize IP addresses enclosed in square brackets, closes gh-2494	5 years ago
sebres	d44607a161	part of #927 - filter enhancement to parse IP sub-nets (IP/CIDR with correct recognition of IP-family), provides new replacement tags for failregex to match subnets in form of IP-addresses with CIDR mask (gh-2559): - `<CIDR>` - helper regex to match CIDR (simple integer form of net-mask); - `<SUBNET>` - regex to match sub-net adresses (in form of IP/CIDR, also single IP is matched, so part /CIDR is optional);	5 years ago
Sergey G. Brester	8b850864cf	amend to #2254 : update changelog	5 years ago
sebres	d1a73d3004	filter.d/apache-auth.conf: - ignore errors from mod_evasive in `normal` mode (mode-controlled now) (gh-2548); - extended with option `mode` - `normal` (default) and `aggressive` close gh-2548	5 years ago
sebres	91923b5c07	don't need to match identifier exactly (@ is precise enough as prefix), not capturing group; `prefregex` extended, more selective now (denied/NOTAUTH suffix moved from `failregex`, so no catch-all there anymore); update ChangeLog	5 years ago
Sergey G. Brester	70280bfa12	Update ChangeLog	5 years ago
Sergey G. Brester	d3b5befe44	update changelog (#2404 )	5 years ago
Sergey G. Brester	8a386103c1	Update ChangeLog	5 years ago
girst	b288ccd6b6	new filter: znc-adminlog	6 years ago
sebres	4c81338944	update ChangeLog (gh-2390)	6 years ago
sebres	2725acb64b	amend to 809acb69e5928c0e678ad25b43e53b567cb23a3b: extended to avoid the vice versa race (too many outdated tickets to unban) - max count of outdated tickets is restricted also.	6 years ago
sebres	e5ae113215	filter.d/postfix.conf: extended with new postfix filter mode `errors` to match "too many errors" (gh-2439), also included within modes `normal`, `more` (`extra` and `aggressive`), since postfix parameter `smtpd_hard_error_limit` is default 20 (additionally consider `maxretry`)	6 years ago
sebres	3b2f75414c	filter.d/postfix.conf: extended regexp's to accept variable suffix code in status of postfix for precise messages (gh-2442)	6 years ago
sebres	8da9bfb83a	Update ChangeLog (gh-2302, rebased to 0.10)	6 years ago
sebres	3b51c005f8	update ChangeLog (multi-line parsing fix, gh-2431)	6 years ago
sebres	4d08bc4ad5	update ChangeLog	6 years ago
Sergey G. Brester	7d6db7391e	Update ChangeLog	6 years ago
Sergey G. Brester	d920dd4014	Update ChangeLog	6 years ago
Sergey G. Brester	ec9f698f5b	removed new-line	6 years ago
Amir Caspi	7ac2f167f9	Update ChangeLog Fixing typo I introduced in commit `eed1de0ceb`	6 years ago
Amir Caspi	eed1de0ceb	Update ChangeLog Updated to reflect sendmail-reject changes `9e1fa4ff73` and `ffd5d0db78`	6 years ago
sebres	1e59d53bbe	fixed typo	6 years ago
Sergey G. Brester	6c14f1987f	Update ChangeLog	6 years ago
Sergey G. Brester	410a9804b1	Update ChangeLog	6 years ago
Ben RUBSON	34edec297b	Add changelog entry	6 years ago
Sergey G. Brester	a48d50efc0	Update ChangeLog	6 years ago
Sergey G. Brester	c819a18a0a	Update ChangeLog	6 years ago
Sergey G. Brester	4108e04ab4	Update ChangeLog	6 years ago
sebres	f959f58e15	extend protocol (command-line) and regenerate man's	6 years ago
sebres	df97fd33cf	ip-list is sorted now (by end of ban) per default; extended with new option `--with-time` to provide more pretty and informative result (separated by new-line, including time strings: time of ban + ban-time = end of ban): 192.0.2.1 2019-01-06 22:24:48 + 300 = 2019-01-06 22:29:48 192.0.2.2 2019-01-06 22:24:48 + 600 = 2019-01-06 22:34:48 also it is possible now to provide separator-character as extra-parameter after `get <jail> banip ?sep-char?` (default is space). removed unneeded test-cases (test code-base minimization) and unexpected manually changed files.	6 years ago
SP	3d477d229d	ENH: added new command `fail2ban-client get <JAIL> banip` to get the banned ip addresses (gh-1916)	6 years ago
Sergey G. Brester	3fa54559e5	Update ChangeLog	6 years ago
sebres	9b96a7de89	fix of SafeConfigParserWithIncludes	6 years ago
CrazyMax	a51f82770b	New filter `traefik-auth`	6 years ago
Sergey G. Brester	0ac5c8941c	Update ChangeLog	6 years ago

1 2 3 4 5 ...

1109 Commits (gh-3497)