sebres
12ff98027f
GHA main.yml: update python versions ('3.13.0', '3.14.0-alpha.1')
2 weeks ago
sebres
eb4731d8b1
action.d/*-ipset.conf: workaround sporadic failures by stop if destroying ipset too fast (sleep a bit in error case and repeat);
...
closes gh-3624
2 weeks ago
sebres
0bf1106d72
manually added attempts inform the observer module (take the known ban-count of bad IPs into account);
...
closes gh-3845
1 month ago
Sergey G. Brester
89970d2e3e
Merge pull request #1351 from AntagonistHQ/csf
...
add support for the CSF firewall
2 months ago
Sergey G. Brester
363c0d5fd0
nftables.conf: fixed comment (since 7f1b578af4
, gh-488 actioncheck would be never invoked in regular case)
3 months ago
Sergey G. Brester
1ea8a6de58
Merge pull request #3826 from thomas-333/patch-1
...
Update apprise.conf: typo
3 months ago
thomas-333
44bd87951e
Update apprise.conf
...
Correct typo. "as" should read "has"
3 months ago
Sergey G. Brester
3361fb0805
Merge pull request #3823 from orlitzky/after-nftables
...
files/fail2ban-openrc.init.in: start after nftables
3 months ago
Michael Orlitzky
9e31cfc1f1
files/fail2ban-openrc.init.in: start after nftables
...
The "after iptables" clause in the OpenRC service script's depend()
function causes fail2ban to start after iptables, if iptables is
scheduled to start. Here we add "after nftables" as well: nftables is
the successor to iptables, and fail2ban supports it out-of-the-box.
If nftables is scheduled to start, we want to wait until it's done
before starting fail2ban.
3 months ago
Sergey G. Brester
be734991eb
main.yml: update python versions ('3.13.0-rc.1', '3.14.0-alpha.0')
3 months ago
Sergey G. Brester
fda37fac81
main.yml: update actions/setup-python to v5
3 months ago
sebres
47e995cb57
Merge branch 'gh-2756': new jail option `skip_if_nologs` to ignore jail if no `logpath` matches found, fail2ban continue to start with warnings/errors, thus other jails become running
3 months ago
sebres
2950e41186
man/jail.conf.5: docu for skip_if_nologs
3 months ago
sebres
78af48862f
new jail option `skip_if_nologs` to ignore jail if no `logpath` matches found, fail2ban continue to start with warnings/errors, thus other jails become running;
...
closes gh-2756
3 months ago
sebres
54c0effceb
filter.d/sshd.conf: amend to #3747/#3812 (new ssh version would log with `_COMM=sshd-session`)
3 months ago
sebres
c769046a1f
Revert "`filterd./sshd.conf`: fixed journalmatch (sshd.service seems to be renamed to ssh.service)" - it'd patched in debian branch.
...
This reverts commit 6fce23e7ba
.
3 months ago
Sergey G. Brester
a43f7ad63f
Merge pull request #3816 from Skamasle/patch-1
...
Fix roundcube login failregex for roundcube 1.4+
3 months ago
sebres
2749109f10
ChangeLog
3 months ago
sebres
8e0a2366f0
Fixes unmatched tag (caused unmatched brace); review: combined to single regex, simple case without injection attempts faster, `<HOST>` replaced with `<ADDR>` (faster and fewer vulnerable on complex cases, since doesn't match text as hostname) etc.
3 months ago
Maksim Usmanov | Maks
af119e0ae1
roundcube 1.4+ logs
3 months ago
Maksim Usmanov | Maks
35afe20ea0
Roundcube 1.4 change log format
...
From roundcube 1.4 log change format -> e92d8e31a3/program/lib/Roundcube/rcube_imap.php (L194)
3 months ago
sebres
d4663e8941
`action.d/firewallcmd-rich-*.conf`: fixed incorrect quoting, disabling port variable expansion by substitution of rich rule; closes gh-3815
4 months ago
sebres
216f0abb5e
Merge pull request #2966 from Derecho-com/master
...
Add support to Proxmox Web GUI
4 months ago
sebres
4a87802c59
ChangeLog
4 months ago
sebres
9a558589d7
review (anchoring RE, etc)
4 months ago
Jose
db8c943a7b
Add jail to jail.conf as requested by test-suite 'More filters exists than are referenced in stock jail.conf set(['proxmox'])
4 months ago
Jose
83f2d59eee
match numbers
4 months ago
Jose
07a7da8d8e
Remove greedy catch-all before HOST
4 months ago
Jose
4fb04842a2
add log file for tests
4 months ago
Jose
ca45671db2
Add support to Proxmox Web GUI
4 months ago
Sergey G. Brester
7fd097d73f
Merge pull request #3805 from nabbi/postfix-3.9
...
tests for Postfix 3.9 SASL reason unavailable
4 months ago
sebres
93810fff75
consider CONNECT and other rejected commands as a valid `_pref`;
...
closes gh-3800
4 months ago
Nic Boet
a4f1b0ce9f
tests for Postfix 3.9 SASL reason unavailable
...
SASL auth failure message changed with Postfix 3.9
Include addtional test log
17dbfb9b8b
Signed-off-by: Nic Boet <nic@boet.cc>
4 months ago
Sergey G. Brester
766d2b8d74
Update FUNDING.yml: added my liberapay
4 months ago
sebres
8170e9fe75
suppress SetuptoolsDeprecationWarning in test suite
5 months ago
Sergey G. Brester
599ec5e01e
main.yml: bump version 3.13.0-beta.3
5 months ago
Sergey G. Brester
7004d175b7
Merge pull request #3782 from fdellwing/patch-1
...
Adjust sshd.conf filter for OpenSSH 9.8
5 months ago
Sergey G. Brester
216622adb2
Update ChangeLog
5 months ago
Sergey G. Brester
50ff131a0f
filter.d/sshd.conf: ungroup (unneeded for _daemon)
5 months ago
Sergey G. Brester
8360776ce1
zzz-sshd-obsolete-multiline.conf: adjusted to new sshd-session log format
5 months ago
Sergey G. Brester
7b335f47ea
sshd: add test coverage for new format, gh-3782
5 months ago
Fabian Dellwing
2fed408c05
Adjust sshd filter for OpenSSH 9.8 new daemon name
5 months ago
sebres
59c5e78ce9
`filter.d/apache-overflows.conf` - consider AH10244: invalid URI path;
...
closes gh-3778
5 months ago
sebres
a7f3a04b0e
`filter.d/recidive.conf` - restore possibility to set jail name in the filter, _jailname is positive now (but by default it uses now negative lookahead to exclude recidive jail);
...
closes gh-3769
5 months ago
sebres
ab9d41e530
beautifier detect whether it can use unicode chars in stats table; asciified output of beautifier in test suite;
...
closes gh-3750
5 months ago
Sergey G. Brester
6fce23e7ba
`filterd./sshd.conf`: fixed journalmatch (sshd.service seems to be renamed to ssh.service)
...
closes gh-3747
6 months ago
sebres
8ae5e7e3e4
GHA: update python version in CI-flow (3.13 is beta now)
6 months ago
sebres
cd95c3a1fc
Merge branch 'ipsettype-in-ipset-actions'
6 months ago
sebres
2533526827
extend ipset actions with new parameter `ipsettype` for the type of set (gh-3760), affected actions:
...
`action.d/firewallcmd-ipset.conf`, `action.d/iptables-ipset.conf`, `action.d/shorewall-ipset-proto6.conf`
6 months ago
sebres
17daf0ec78
`action.d/firewallcmd-ipset.conf`: rename `ipsettype` to `ipsetbackend` (`ipsettype` will be used now to the real set type);
...
amend to #2620
6 months ago