3494 Commits (0c2eeee8c7fc4b3a26083ef2f04ebde0c96560c6)

 

All Branches   

Search

Author	SHA1	Message	Date
sebres	f7cc55103c	optimized FailManager: increase performance, try to prevent memory leakage (don't copy failures resp. it list on some operations)	9 years ago
sebres	f143ae479c	code and config review after rebase to current master	9 years ago
sebres	72f29e9061	asyncserver (asyncore) code fixed and test cases repaired (always delete temp files, wait for end of thread/server, etc) ... definitely closes gh-161, also other usage of asyncore event loop (in test_smtp.py) repair cache in ipToName (can returns None), precaching of invalid IPs (according to RFC 5737) to stop endless wait for resolving it in test cases.	9 years ago
sebres	770c219ab6	SetupTest should run at version of python currently installed (resp. active one), skip if started with another version.	9 years ago
sebres	cf3cf27fa3	- filtering of test cases extended for method additionally to class (matches method only not whole class for regexp matched method name); ... - new options for "fail2ban-testcases" introduced: "-g" or "--no-gamin" and "-m" or "--memory-db", both are true also if "-f" or "--fast" specified, for example: `fail2ban-testcases -ngm` will runs faster (because no network, no gamin, memory database) but will use the same default sleep intervals as in production (in comparison to -nf); - seekToTime rewritten, accuracy increased by seekToTime, extended for all FileFilter (PyInotify, Gamin also), test cases extended etc. - common performance optimized and code reviewed;	9 years ago
sebres	6faffe3201	test cases extended, code review (+ python 3.x compatibility); ... database test cases extended - enable deleted (disabled) jail in addJail;	9 years ago
Yaroslav Halchenko	0e61b7586a	RF: use descriptive loop variable (oldticket) and matching associated variable suffixes (old)	9 years ago
Yaroslav Halchenko	e2a68bb02d	RF: make Jail new style class, avoiding multiple inheritance with object	9 years ago
Yaroslav Halchenko	78eb4d95eb	RF: is_alive -> isAlive to stay consistent in camelCasing	9 years ago
sebres	59bf5013c0	- performance of fail2ban optimized ... -- cache dnsToIp, ipToName to prevent long wait during retrieving of ip/name for wrong dns or lazy dns-system; -- instead of simple "sleep" used conditional wait "wait_for", that internal increases sleep interval up to sleeptime; -- ticket / banmanager / failmanager modules are performance optimized; -- api of filter (log files), jail, etc. rewritten and extended for performance purposes; - performance of test cases optimized: -- added option "--fast" to decrease wait intervals, avoid passive waiting, and skip few very slow test cases; - code review after partially cherry pick of branch 'ban-time-incr' (see gh-716) -- ticket module prepared to easy merge with newest version of 'ban-time-incr', now additionally holds banTime, banCount and json-data; -- executeCmd partially moved from action to new module utils, etc. -- python 2.6 compatibility; - testExecuteTimeoutWithNastyChildren: test case repaired - wait for pid file inside bash, kill tree in any case (gh-1155); - testSocket: test case repaired - wait for server thread starts a socket (listener)	9 years ago
sebres	3540619a73	code review, test case extended;	9 years ago
sebres	d23d103f96	code review and few new test cases	9 years ago
sebres	db5ee0842a	increase code coverage	9 years ago
sebres	d22b2498d4	normalizing time config entries: use time abbreviation (str2seconds) for all time options such 'dbpurgeage', 'bantime', 'findtime', ex.: default '1d' instead '86400'; ... code review and test case extended;	9 years ago
sebres	dad4234beb	The tricky bug fixed - last position of log file will be never retrieved (#795): ... addJail (executed before addLog) early uses a "INSERT OR REPLACE" statement to update "enabled" to 1 (and add jail the first time used at once), but this syntax in sqlite always deletes an entry (cause of constraint) and inserts it again, so because of CASCADE all log entries with this jail will be also deleted from logs table.	9 years ago
sebres	410f9d7c10	filter, datedetector, datetemplate: performance optimizing of combination datedetector.matchTime/getTime2, because early getTime search a template and call template.matchTime again (so the date parsing was really executed twice, now just once); ... debug logging optimized; added info line log "Start Fail2ban ..." after changed logging target;	9 years ago
sebres	42199957d0	prevent completely read of big files first time (after start of service), initial seek to start time using half-interval search algorithm (see issue #795): ... now polling backend only (currently not implemented for gamin and pyinotify backends); python3/pypy compatibility fix + removing obsolete code	9 years ago
sebres	3cfdc5ecb3	test cases extended; ... code review	9 years ago
sebres	a3e0cc9830	introduced string to seconds (str2seconds) for configuration entries with time; ... todo: expands it for all time config entries;	9 years ago
Yaroslav Halchenko	26dd6d7425	Merge pull request #1258 from aleksandrs-ledovskis/feature/postfix-domain-not-found-failregex ... Add 'Sender address rejected: Domain not found' Postfix failregex	9 years ago
Yaroslav Halchenko	dfaf82d68a	Changelog entry for PartOf in .service fix	9 years ago
Yaroslav Halchenko	9f15d02910	Merge pull request #1251 from fastest963/master ... Added PartOf to service file so f2b restarts when deps do	9 years ago
Yaroslav Halchenko	edcbdf6eab	Merge pull request #1264 from rbrownwsws/master ... Added filter and jail for murmur/mumble-server.	9 years ago
Yaroslav Halchenko	39d202b623	Merge pull request #1273 from yarikoptic/enh-log-matchtuple ... ENH: log at heavydebug level what actually we are matching for failregex	9 years ago
Ross Brown	8d12dba245	Merge remote-tracking branch 'upstream/master'	9 years ago
Ross Brown	16aa2fa13e	Updated ChangeLog to include new murmur jail.	9 years ago
Ross Brown	ead2d509dc	Updated 'murmur' filter to use new double-anchored regex based on @yarikoptic's suggestions.	9 years ago
Yaroslav Halchenko	61b2653f9e	Merge pull request #1274 from yarikoptic/enh-new-sshd-too-many ... ENH: sshd filter -- match new "maximum auth attempts exceeded"	9 years ago
Ross Brown	fd36b058ce	Changed usernames in sample log file for 'murmur' filter.	9 years ago
Ross Brown	ba535826a8	Updated ChangeLog to include new murmur filter.	9 years ago
Yaroslav Halchenko	5d6cead996	ENH: sshd filter -- match new "maximum auth attempts exceeded" (Closes #1269)	9 years ago
Yaroslav Halchenko	9ee08fed48	ENH: log at heavydebug level what actually we are matching for failregex	9 years ago
sebres	6d984717b5	ordered dict replaced with dict + change log entry fix ... # Conflicts: # fail2ban/server/filter.py	9 years ago
Yaroslav Halchenko	48202f998d	RF: prefer log over container in getLog and local variables ... Even though I have left FileContainer class name intact	9 years ago
Yaroslav Halchenko	59da27b9f6	ENH: add a check to testTail to assure correct test logic below it	9 years ago
Yaroslav Halchenko	dd9d1912e8	RF: Filter.getLogPaths -> getLogs ... Since it returns log containers not paths per se	9 years ago
sebres	6ce7522d3c	unordered (python 2.6) compatibility fix and coverage extended;	9 years ago
sebres	3a179ec5d7	small code review: (much pretty) handling of filename as key - FileFilter contains (ordered) dict of files (not list), as discussed in gh-1265	9 years ago
Ross Brown	4c837f0333	Added sample log file for 'murmur' filter.	9 years ago
Ross Brown	106c3eab9a	Added filter and jail for murmur/mumble-server.	9 years ago
Serg G. Brester	1b0560d2f1	Merge pull request #1262 from sarneaud/gentoo-initd ... Small fixes for Gentoo initd script	9 years ago
sarneaud	5b88a84fe8	Small fixes for Gentoo initd script ... These fixes are pretty pedantic, but they do simplify the script a little. * Checking the existence of a file/directory before creating/deleting it adds complexity and raciness. There are better options. * mkdir -p does the job of making sure a directory exists. (It only fails if there's a filesystem error or something.) * Likewise, rm -f doesn't fail if the file doesn't exist. * rm -r isn't neccessary because the socket shouldn't be a directory. (If it is for some reason, that should be an error.)	9 years ago
Aleksandrs Ļedovskis	fa59a6850f	Add 'Sender address rejected: Domain not found' Postfix failregex ... Signed-off-by: Aleksandrs Ļedovskis <aleksandrs@ledovskis.lv>	9 years ago
Yaroslav Halchenko	fe8d585d91	Merge pull request #1225 from opoplawski/journaldefault ... Add *_backend options for services to allow distros to set the default backend	9 years ago
Orion Poplawski	c656cb0d36	Merge branch 'master' into journaldefault ... Conflicts: ChangeLog	9 years ago
James Hartig	9905396eb8	Added PartOf to service file so f2b restarts when deps do	9 years ago
Yaroslav Halchenko	b3ed19b36a	DOC: tune up to jail.conf.5 - some line breaks, typos etc	9 years ago
Yaroslav Halchenko	6af6e40b62	Merge pull request #1241 from sebres/known/param-tag ... New interpolation feature for definition config readers - `<known/parameter>`	9 years ago
Yaroslav Halchenko	441dffbe2a	ENH: Pruned some "pragma: no cover"s in fail2banregex ... This code should and can be unit-tested, so no reason to keep it with no cover	9 years ago
Yaroslav Halchenko	584f3af5af	Merge pull request #1240 from yarikoptic/master ... ENH: .mailmap file to bring some names together for git shortlog -sn	9 years ago