4934 Commits (0ae2ef68be57f056038adaf064570e6725c6f20f)

 

All Branches   

Search

Author	SHA1	Message	Date
sebres	91eca4fdeb	automatically create not-existing path (last level folder only) for pidfile, socket and database (with default permissions)	5 years ago
sebres	14e68eed72	performance: set fetch handler getGroups depending on presence of alternate tags in RE (simplest variant or merged with alt-tags) in regex constructor	5 years ago
sebres	9137c7bb23	filter processing: ... - avoid duplicates in "matches" (previously always added matches of pending failures to every next real failure, or nofail-helper recognized IP, now first failure only); - several optimizations of merge mechanism (multi-line parsing); fail2ban-regex: better output handling, extended with tag substitution (ex.: `-o 'fail <ip>, user <F-USER>: <msg>'`); consider a string containing new-line as multi-line log-excerpt (not as a single log-line) filter.d/sshd.conf: introduced parameter `publickey` (allowing change behavior of "Failed publickey" failures): - `nofail` (default) - consider failed publickey (legitimate users) as no failure (helper to get IP and user-name only) - `invalid` - consider failed publickey for invalid users only; - `any` - consider failed publickey for valid users too; - `ignore` - ignore "Failed publickey ..." failures (don't consider failed publickey at all) tests/samplestestcase.py: SampleRegexsFactory gets new failJSON option `constraint` to allow ignore of some tests depending on filter name, options and test parameters	5 years ago
sebres	1492ab2247	improve processing of pending failures (lines without ID/IP) - fail2ban-regex would show those in matched lines now (as well as increase count of matched RE); ... avoid overwrite of data with empty tags by ticket constructed from multi-line failures; amend to d1b7e2b5fb2b389d04845369d7d29db65425dcf2: better output (as well as ignoring of pending lines) using `--out msg`; filter.d/sshd.conf: don't forget mlf-cache on "disconnecting: too many authentication failures" - message does not have IP (must be followed by "closed [preauth]" to obtain host-IP).	5 years ago
Sergey G. Brester	ac8e8db814	travis: switch 3.8-dev to 3.8 (released)	5 years ago
Sergey G. Brester	d7643fe538	Merge pull request #2630 from fail2ban/gh-2200-postfix ... filter.d/postfix.conf: extended mode ddos and aggressive covering multiple disconnects without auth	5 years ago
Sergey G. Brester	88cf5bcd93	Update postfix	5 years ago
Sergey G. Brester	774dda6105	filter.d/postfix.conf: extended mode ddos and aggressive covering multiple disconnects without auth	5 years ago
Sergey G. Brester	34d63fccfe	close gh-2629 - jail.conf (action_blocklist_de interpolation): replace service parameter (use jail name instead of filter, which can be empty)	5 years ago
sebres	7a28861fc7	review of command line: more long-named options can be supplied via command line	5 years ago
sebres	3f48907064	amend to f3dbc9dda10e52610e3de26f538b5581fd905505: change main thread-name back to `fail2ban-server`; ... implements new command line option `--pname` to specify it by start of server (default `fail2ban-server`); closes gh-2623 (revert change of main thread-name, because it can affect process-name too, so `pgrep` & co. may be confused)	5 years ago
sebres	9c7bd80807	fail2ban-regex: stop endless logging on closed streams (redirected pipes like `... | head -n 100`), exit if stdout channel is closed	5 years ago
sebres	12b3ac684a	closes #2615: systemd backend would seek to last known position (or `now - findtime`) in journal at start.	5 years ago
sebres	569dea2b19	filter.d/mysqld-auth.conf: capture user name in filter (can be more strict if user switched, used in action or fail2ban-regex output); ... also add coverage for mariadb 10.4 log format (gh-2611)	5 years ago
sebres	9e6d07d928	testSampleRegexsFactory: `time` is not mandatory anymore (check time only if set in json), allows usage of same line(s) matching different `logtype` option: ... `# filterOptions: [{"logtype": "file"}, {"logtype": "short"}, {"logtype": "journal"}]`	5 years ago
sebres	8dc6f30cdd	closes #2596: fixed supplying of backend-related `logtype` to the jail filter - don't merge it (provide as init parameter if not set in definition section), init parameters don't affect config-cache (better implementation as in #2387 and it covered now with new test)	5 years ago
sebres	05f9e53660	Merge branch '0.10-invariant-improve' into 0.10	5 years ago
sebres	d4c921c22a	amend to 31b8d91ba2211595182d8d3fe6d89034b562aef0: tag `<family>` is normally dynamic tag (ticket related), so better to replace it this way (may avoid confusing if tag is used directly during restore sane env process for both families); conditional replacement is not affected here	5 years ago
sebres	ec37b1942c	action.d/nginx-block-map.conf: fixed backslash substitution (different echo behavior in some shells, gh-2596)	5 years ago
sebres	31a6c8cf5d	closes gh-2599: fixes `splitwords` for unicode string	5 years ago
sebres	b158f83aa3	testIPAddr_CompareDNS: add missing network constraint (gh-2596)	5 years ago
sebres	b25d8565fc	release 0.10.5 -- Deserve more respect a jedi's weapon must. Hrrrm, Yes	5 years ago
sebres	4e4bd43e5e	small amend for d1b7e2b5fb2b389d04845369d7d29db65425dcf2: double usage string removed, spacing fixed ... generate-man: small fixing (avoid ../bin in usage, version fix	5 years ago
sebres	f77398c49d	filter.d/sshd.conf: captures `Disconnected from ... [preauth]`, preauth phase only, different handling by `extra` (with supplied user only) and `ddos`/`aggressive` mode (`normal` mode is not affected, used there just as a helper with `<F-NOFAIL>` to capture IP for multiline failures without IP); ... closes gh-2115, gh-2362.	5 years ago
sebres	d1b7e2b5fb	fail2ban-regex - several enhancements and fixes: ... - improved usage output (don't put a long help if an error occurs); - new option `--no-check-all` to avoid check of all regex's (first matched only); - new option `-o`, `--out` to set token provided in output (disables check-all and outputs only expected data); - test cases optimized and extended	5 years ago
sebres	dbc6590589	usage of failure-ID tag `<F-ID>...</F-ID>` causes raw handling automatically (avoid DNS-resolve for found ID)	5 years ago
Sergey G. Brester	a15832e773	Merge pull request #2588 from sebres/0.10-invariant-improve ... 0.10 auto-reban, improved invariant check and conditional operations	5 years ago
sebres	f30b7ae244	update ChangeLog + spelling	5 years ago
sebres	17a34b1528	amend with missing parameter of actionreban in actionreader and coverage	5 years ago
sebres	f001f8de2a	automatic reban (repeat banning action) after repair/restore sane environment, if already logged ticket causes new failures (part of #980, closes #1680); ... introduces banning epoch for actions and tickets (to distinguish or recognize removed set of tickets)	5 years ago
sebres	1a9bc1905d	auto-detection of IPv6 subsystem availability (important for not on-demand actions or jails, like pass2allow)	5 years ago
sebres	125da61bda	more cases covered, start in repair distinguish operations, on demand flag etc	5 years ago
sebres	b7fe33483a	coverage	5 years ago
sebres	a527fbcae5	small amend: if not on-demand, the families should be specified (or default), also avoids error "dictionary changed size during iteration"	5 years ago
sebres	67fd75c88e	pass2allow-ftp: inverted handling - action should prohibit access per default for any IP, so reset start on demand parameter for this action (will be started immediately).	5 years ago
sebres	165b7d6643	tests fixed, prepared for other conditional operations (for subnet usage), operations like repair/flush/stop considering started families (executed for started only)	5 years ago
sebres	3c42c7b9ef	**not ready** testActionsConsistencyCheck fixed, but several **broken** tests (todo: fix public interface like action.start()/stop()).	5 years ago
sebres	31b8d91ba2	**not ready** amend with more tests (some issue on stop?)	5 years ago
sebres	8f6ba15325	avoid unhandled exception during flush, better invariant check (and repair), avoid repair by unban/stop etc...	5 years ago
Sergey G. Brester	690a0050f0	Merge pull request #2567 from Mart124/bitwarden ... New jail, Bitwarden	5 years ago
sebres	7e98073014	amend to f3dbc9dda10e52610e3de26f538b5581fd905505: don't need truncate (if the name with \0 exceeds 16 bytes, the string is silently truncated by prctl).	5 years ago
sebres	f3dbc9dda1	set real thread names (used for identification and diagnostic purposes, e. g. top -H, ps -e -T, pstree, etc)	5 years ago
Mart124	e763c657c4	Let's get back to WRN	5 years ago
Mart124	566cbcdde0	Update bitwarden	5 years ago
Mart124	d7b707b09d	Update bitwarden.conf	5 years ago
Mart124	869327e9b1	Update bitwarden.conf	5 years ago
Mart124	79caeaa520	Create bitwarden.conf	5 years ago
Mart124	30e742a849	Update jail.conf	5 years ago
Mart124	ef394b3cf0	Update jail.conf	5 years ago
Mart124	a3df1ab3f0	Create bitwarden	5 years ago