797 Commits (03b31398aac4ff4edab992b5c3969712bb35858b)

 

All Branches   

Search

Author	SHA1	Message	Date
Yaroslav Halchenko	b33ae8c194	Ask users to report bugs to github's issues	13 years ago
Yaroslav Halchenko	08564bda1a	ENH: fail2ban-testcases -- custom logging format to ease debugging, non-0 exit code in case of failure	13 years ago
Yaroslav Halchenko	6ac9fd5d26	ENH: Filter's testcases -- rename, del + list again --- a bit unstable, might still fail from time to time	13 years ago
Yaroslav Halchenko	3c95121a8b	BF: pyinotify -- monitor the parent directory for IN_CREATE + process freshly added file (Closes gh-44)	13 years ago
Yaroslav Halchenko	60260bce3d	ENH: first working unittest for checking polling and inotify backends	13 years ago
Yaroslav Halchenko	baa09098f0	RF/BF: just use pyinotify.ThreadedNotifier thread in filterpyinotify ... that seems also to overcome the problem of often locking upon stop()	13 years ago
Yaroslav Halchenko	25674a95f8	RF: filter.py -- single readline in a loop	13 years ago
Yaroslav Halchenko	b3614d4ea2	ENH: FilterPoll -- adjusted some msgs + allowed to operate without jail (for testing)	13 years ago
Yaroslav Halchenko	42523dce92	Minor additional comment to DEVELOP	13 years ago
Yaroslav Halchenko	47e956bc8e	Replace "|" with "_" in ipmasq-ZZZzzz|fail2ban.rul (Closes gh-66) ... Surprise -- that is for Windows compatibility	13 years ago
Yaroslav Halchenko	0b842272e3	ENH: extended test LogfileMonitor	13 years ago
Alan Jenkins	8c38907016	Misconfigured DNS should not ban *successful* ssh logins ... Noticed while looking at the source (to see the point of ssh-ddos). POSSIBLE BREAK-IN ATTEMPT - sounds scary? But keep reading the message. It's not a login failure. It's a warning about reverse-DNS. The login can still succeed, and if it _does_ fail, that will be logged as normal. <exhibit n="1"> Jul 9 05:43:00 brick sshd[18971]: Address 200.41.233.234 maps to host234.advance.com. ar, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Jul 9 05:43:00 brick sshd[18971]: Invalid user html from 200.41.233.234 </exhibit> The problem (in my mind) is that some users are stuck with bad dns. The warning won't stop them from logging in. I'm pretty sure they can't even see it. But when they exceed a threshold number of logins - which could be all successful logins - fail2ban will trigger. fail2ban shouldn't adding additional checks to successful logins - it goes against the name fail2ban :) - the first X "POSSIBLE BREAK-IN ATTEMPT"s would be permitted anyway - if you want to ban bad DNS, the right way is PARANOID in /etc/hosts.deny I've checked the source of OpenSSH, and this will only affect the reverse-DNS error. (I won't be offended if you want to check for yourself though ;) <exhibit n="2"> $ grep -r -h -C1 'ATTEMPT' openssh-5.5p1/ logit("reverse mapping checking getaddrinfo for %.700s " "[%s] failed - POSSIBLE BREAK-IN ATTEMPT!", name, ntop); return xstrdup(ntop); -- logit("Address %.100s maps to %.600s, but this does not " "map back to the address - POSSIBLE BREAK-IN ATTEMPT!", ntop, name); $ </exhibit>	13 years ago
Yaroslav Halchenko	9a2b41f6ad	ENH: add more verbosity levels to be controlled while running unittests	13 years ago
Yaroslav Halchenko	398cc73d3d	Added few tests of FileFilter. yet to place them into a Jail-ed execution test ... At the moment they are, despite being provided different backends, pretty much test FileFilter functionality.	13 years ago
Yaroslav Halchenko	bbab49a415	DOC: distilling some of server "design" into DEVELOP notes for common good	13 years ago
Yaroslav Halchenko	9b360bb12d	ENH: minor, just trailing spaces/tabs + reformated a string	13 years ago
Yaroslav Halchenko	215c3cc5c5	ENH: added a basic test for FilterPoll for detection of modifications ... The test class MonitorFailures is intended to be excercised for all Filter*'s, i.e. backends. It is just atm it is useful only for Poll	13 years ago
Yaroslav Halchenko	f970bb288a	Merge pull request #59 from yakatz/doc/DEVELOP ... clarified that the are existing test cases and the 'coming soon' is about creating new ones	13 years ago
Yehuda Katz	bd40cc7c31	clarified that the are existing test cases and the 'coming soon' is about creating new ones.	13 years ago
Yaroslav Halchenko	25b629a75b	Merge pull request #58 from yakatz/doc/DEVELOP ... Added beginnings of documentation for developers	13 years ago
Yehuda Katz	322f53e26d	Added beginnings of documentation for developers	13 years ago
Yaroslav Halchenko	3989d24967	BF: usedns=no was not working at all ... it was not adding any detected address, IP or not to the list of failed attempts This commit also adds appropriate unittest	13 years ago
Yaroslav Halchenko	971406f722	RF: filtertestcase.py to put common testing into a helping subroutine	13 years ago
Yaroslav Halchenko	d0a322f2b8	ENH: be able to control verbosity from cmdline for fail2ban-testcases	13 years ago
Yaroslav Halchenko	b4099dae57	DOC: Adjusted header for config/*.conf to mention .local and way to comment ... thanks to Stefano Forli for reminding about comments see Debian Bug#676146	13 years ago
Yaroslav Halchenko	958aa2e932	Merge pull request #50 from mellitus/master ... Fix addBannedIP/banip command (Closes gh-31)	13 years ago
Chris Reffett	a018a26133	Fixed addBannedIP to add enough failures to trigger a ban, rather than ... just one failure.	13 years ago
Jeremy Olexa	444e4ac3ed	Fix Gentoo initd script (drop extra_commands)	13 years ago
Petr Voralek	4007751191	ENH: catch failed ssh logins due to being listed in DenyUsers. Close gh-47 (Closes: #669063)	13 years ago
Yaroslav Halchenko	7b77beee0e	DOC: comment in jail.conf for the need of multiple jails for asterisk	13 years ago
Yaroslav Halchenko	71a3fb17e2	Merge remote-tracking branch 'gh-magicrhesus/master' ... * gh-magicrhesus/master: Add the INCLUDE section to use __pid_re feature Disable asterisk jail by default Change jail for asterisk, add support for SIP and SIP-TLS on TCP and UDP ports Change NOTICE by NOTICE%(__pid_re)s Remove custom bantime Add sample log file for asterisk Add $ at the end of the failregex Add asterisk support Conflicts: config/jail.conf -- placed asterisk jails before recidive and added blank lines after the jail headers	13 years ago
Xavier Devlamynck	8c00ce0a65	Add the INCLUDE section to use __pid_re feature	13 years ago
Xavier Devlamynck	180c17bede	Disable asterisk jail by default	13 years ago
Xavier Devlamynck	df0e0fdc07	Change jail for asterisk, add support for SIP and SIP-TLS on TCP and UDP ports	13 years ago
Xavier Devlamynck	c679a1a588	Change NOTICE by NOTICE%(__pid_re)s	13 years ago
Yaroslav Halchenko	42dd05210a	Added a warning for the recidive jail	13 years ago
Yaroslav Halchenko	617094fad5	BF: fail2ban-regex -- adding forgotten char for -v	13 years ago
Xavier Devlamynck	d7ca754980	Merge branch 'master' of github.com:magicrhesus/fail2ban	13 years ago
Xavier Devlamynck	c7613ce311	Remove custom bantime	13 years ago
Xavier D	7a76838737	Add sample log file for asterisk	13 years ago
Xavier D	d98cdb25d6	Add $ at the end of the failregex	13 years ago
Yaroslav Halchenko	5891d2d218	ENH: fail2ban-regex -- quieter by default and added --verbose mode ... now # of hits groupped into regexp listings since it makes little to no sense to have it separate	13 years ago
Yaroslav Halchenko	d2ffee0b2d	ENH: minor, just pythonized some parts of fail2ban-regex summary	13 years ago
Yaroslav Halchenko	2245ff5b41	ENH: rudimentary __repr__ for Filter and Jail + moved usedns into set method ... otherwise usedns is way too noisy, especially within fail2ban-regex	13 years ago
Yaroslav Halchenko	25f1e8d98c	BF: allow trailing whitespace in few missing it regexes for sshd.conf	13 years ago
Yaroslav Halchenko	b257be4cd1	BF+ENH: added %m-%d-%Y pattern + do not add %Y for Feb 29 fix if already present in the pattern ... although %m-%d-%Y is ambioius with %d-%m-%Y it comes after so it should not be too dangerous (i.e. in upcoming days having smth like 02-01 should work as before matching first one first) and proper fix to select between the two should follow some time soon	13 years ago
Yaroslav Halchenko	10729f96b9	minor comment into TODO	13 years ago
Yaroslav Halchenko	221210404c	Merge branch '_tent/gentoo+recidive' ... * _tent/gentoo+recidive: ENH: moved jail definition for recidive into jail.conf + swapped/commented durations + non-groupping ?: gentoo init scipt: $opts variable is deprecated See http://forums.gentoo.org/viewtopic-t-899018.html Fix for https://github.com/fail2ban/fail2ban/issues/19	13 years ago
Yaroslav Halchenko	1807be5a8c	ENH: moved jail definition for recidive into jail.conf + swapped/commented durations + non-groupping ?: ... thanks @cepheid666 for the useful comments	13 years ago
Tom Hendrikx	0eaa4c2750	gentoo init scipt: $opts variable is deprecated ... See http://forums.gentoo.org/viewtopic-t-899018.html	13 years ago