fail2ban

Commit Graph

Author	SHA1	Message	Date
sebres	0ae932ba5e	setup fix for python3, bypass directories (__pycache__) created after ignore command was tested	8 years ago
sebres	fa8184d4cc	fixes deprecated DNSUtils.IsValidIP in fakegooglebot ignore command + test covered now; Closes #1559	8 years ago
sebres	973ac9a45c	amend to c2d2e79b0d48bf66b04c3772c2419f30a4b1f9db: missing error variable in import block; additionally fixes forgotten skip for cymru server case, if --no-network specified); Closes #1568	8 years ago
sebres	c2d2e79b0d	ExtendedCymruInfo: better availability check (code review and timeout's); max sleep time check of too long sleep increased to 1 second (typo fix)	8 years ago
sebres	ee1727ecca	Merge pull request #1563 from niklasf/fix-lazy-ipv6-regex (and sebres/fix-lazy-ipv6-regex) into 0.10	8 years ago
sebres	276759b6c2	ExtendedCymruInfo code review and availability check in test cases; max sleep time check of too long sleep increased to 1 second	8 years ago
sebres	9bf8985e2a	nginx-limit-req.conf: more precise failregex (word-boundary if `<HOST>` should be non-greedy for some reasons)	8 years ago
sebres	06674bb989	use common regex for IP addresses (removed code duplication)	8 years ago
Serg G. Brester	ba9a88977f	Merge pull request #1562 from sebres/_0.10/fix-stability-and-speed 0.10/fix stability and speed optimization	8 years ago
sebres	8b0f6c5413	badips test cases check availability of badips service (and skip this tests if it not available)	8 years ago
sebres	9a7c753372	fixes method-related filter for tests of suite loaded with loadTestsFromName (they may be a suite self)	8 years ago
Niklas Fiekas	057f2f3c56	make the ipv6 host regex greedy Previously the regex was lazily matching ``2606:2800:220:1:248:1893:25c8:1946`` as ``2606:2800:220:1:248:1893:25c8:1``.	8 years ago
sebres	77ec9df678	standardize and normalize verbosity parameters for fail2ban-regex / fail2ban-testcases (-v ... -vvvv, or --verbosity=0..4)	8 years ago
sebres	2cfaf845ca	standardize and normalize logging and verbosity formats, logging level etc between command lines (server, client, test-cases); test cases could pass (so increase) verbosity to the client (and furthermore client to the server also), usable for debug purposes resp. simplifying read of the log-file; custom and precise numeric log-levels can be given in test cases now;	8 years ago
sebres	62b8664175	speedup server start/stop (waiting for communicate, etc); extend server socket with timeouts, extend ping with timeout parameter;	8 years ago
sebres	542419acab	filtertestcase: use shorter sleep (almost just for the context switch here)	8 years ago
sebres	b615ba49ff	disengage testExecuteTimeout test-case from -fast option, just make it faster (timeout shorter) in this case	8 years ago
sebres	b011cf17b2	increase performance of executeCmd (actions), thereby introduced new shorter interval for fast operations (leaves unchanged default wait operation intervals (sleep time, threshold interval) - for the same inertance, to save same system (load by many jails resp. log files); extends wait_for with callable timeout (test case fixed);	8 years ago
sebres	310d4e224d	Merge branch master (0.9) into 0.10	8 years ago
Serg G. Brester	8e3e333d54	Update ChangeLog	8 years ago
Serg G. Brester	d9e1a4f547	Merge pull request #1556 from szepeviktor/master Monit config: scripting is not supported in path	8 years ago
Serg G. Brester	a0d8581a2c	Merge pull request #1557 from sebres/_0.10/fix-reload-bug 0.10/reload-and-more: reload without restart, stability and performance fixes	8 years ago
sebres	5151c4fa6d	ChangeLog entries added	8 years ago
sebres	5e4fdb60c8	extended test-cases (coverage)	8 years ago
sebres	449c46aec4	extended test-cases (coverage)	8 years ago
sebres	004879b5b1	code review: switch MAX_TIME to 0X7FFFFFFFFFFF (is enough, because 4461763-th year, but better performance)	8 years ago
sebres	e00be5f308	Fixed sporadically error in testCymruInfoNxdomain, because of unsorted values: ``` AssertionError: Dictionaries differ: {'country': ['unknown', 'nxdomain'], 'asn': ['4565', 'nxdomain'], 'rir': ['other', 'nxdomain']} != {'country': ['nxdomain', 'unknown'], 'asn': ['nxdomain', '4565'], 'rir': ['nxdomain', 'other']} ``` Added assertDictEqual for compatibility to early python versions (< 2.7);	8 years ago
sebres	e7fa74b989	smaller inertance inside test-cases (amend to `d153555a07` with decreasing default wait operation that litle bit speedup test-cases)	8 years ago
sebres	ab0c28260b	switch down log level for some annoying messages to tracedebug or heavydebug (to 7 or even 5); added verification of specified log-level before transmitting to the server; numeric log-level allowed now in server (resp. fail2ban.conf);	8 years ago
Viktor Szépe	a406c6eb3a	By the author: > Yes, scripting is not supported in path. https://bitbucket.org/tildeslash/monit/issues/372/webadmin-shows-only-the-first-part-of#comment-27946048	8 years ago
sebres	48ebe3e735	FilterPyinotify: high cpu load fix - timeout for pyinotify must be set in milliseconds (our time values are floats contain seconds);	8 years ago
sebres	c0373a7158	repair typo bug in reloading for systemd-filter; JailThread get method `join` for safe usage of it, also for not started threads (test-cases or in case of error), that will be used for cleanup resp. wait purposes also (see join of pyinotify-filter);	8 years ago
sebres	d153555a07	increase default wait operation (sleep time, threshold interval) - avowedly greater inertance, but fewer system load by many jails resp. log files; waiting with `wait_for` extended with verifying of active flag; implemented better error handling in some multi-threaded routines; shutdown of jails rewritten (faster and safer, does not breaks shutdown process if some error occurred);	8 years ago
sebres	35ce1166b6	allows to update some configuration options (read with config-readers) with command line option, e. g.: ```bash ## start server with DEBUG log-level (ignore level read from fail2ban.conf): fail2ban-client --loglevel DEBUG start ## or fail2ban-server -c /cfg/path --loglevel DEBUG start ## keep server log-level by reload (without restart it) fail2ban-client --loglevel DEBUG reload ## switch log-level back to INFO: fail2ban-client set loglevel INFO ```	8 years ago
Serg G. Brester	28e286cd2d	Merge pull request #1551 from fail2ban/sebres-patch-fips-gh-1540 filter.py: FIPS compliant fix (use sha1 instead of md5 if not allowed)	8 years ago
sebres	0f1d1a0d4d	ChangeLog: FIPS compliant	8 years ago
Serg G. Brester	1071db2256	filter.py: easy-fix to use sha1 instead of md5 if its usage prohibited by some systems following strict standards (like FIPS) closes gh-1540	8 years ago
Serg G. Brester	fad953ade6	Merge pull request #1544 from sebres/fix/vsftpd-gh-1543 filter.d/vsftpd.conf: optional reason part in message after FAIL LOGIN	8 years ago
sebres	20b92f3ead	fail2ban-regex: build replacement of `<HOST>` substitution corresponding parameter `usedns` - now also in fail2ban-regex (amend)	8 years ago
sebres	ebd864660a	normalize usage of preferred encoding (and decode any to string); python 3.x compatibility (used uni_decode for string representation of stdout/stderr, unified test cases) amend for #1542	8 years ago
sebres	e0347bb3a0	assertLogged extended with parameter wait (to wait up to specified timeout, before we throw assert exception) + test cases rewritten using that	8 years ago
sebres	a20f325f80	database: stability fix - repack cursor iterator as long as locked	8 years ago
sebres	f6197200a9	introduced new flag "banned" as property, used to recognize the ticket was really banned; get/set restored flag functions rewritten to property "restored" similar to "banned"; several code optimizations and tests extensions;	8 years ago
sebres	2108216d33	file filter-backends: stability fix for sporadically errors - always close file handle, otherwise may be locked (prevent log-rotate, etc.)	8 years ago
sebres	4404642fa3	pyinotify-backend: stability fix for sporadically errors in multi-threaded environment (without lock)	8 years ago
sebres	8c4eebc3e3	reload actions amend, code review and test cases extended for update/start/stop of actions by reloading	8 years ago
sebres	9fb167b5e1	filter.d/vsftpd.conf: optional reason message after FAIL LOGIN, closes #1543	8 years ago
sebres	4fb511294e	temp commit: reload now supported actions and action reloading (parameters, unban obsolete removed actions, etc.)	8 years ago
sebres	d1ef33cc45	New command action parameter `actionrepair` - command executed in order to restore sane environment in error case of `actioncheck`. # [WARNING] TODO: be sure all banactions get a repair command, because otherwise stop/start will theoretically remove all the bans, but the tickets are still in BanManager, so in case of new failures it will not be banned, because "already banned" will happen.	8 years ago
sebres	8cba537f6c	code review and use new logger-signals for waiting; + regenerated man-files	8 years ago

1 2 3 4 5 ...

3789 Commits (0ae932ba5e5e364e22392e1ecd2d72a75e427f62) All Branches Search

3789 Commits (0ae932ba5e5e364e22392e1ecd2d72a75e427f62)

All Branches