Daniel Black
|
1519712972
|
ENH: filter.d/vsftpd anchor internal regex at start
|
2013-10-05 20:02:21 +10:00 |
Daniel Black
|
23dd734aa9
|
Merge pull request #366 from grooverdan/dovecot
ENH: dovecot regex to match failure reported by Bob Cohen on mailing lis...
|
2013-10-01 15:50:39 -07:00 |
Daniel Black
|
f998e01590
|
Merge pull request #359 from grooverdan/pureftpd
ENH: Pureftpd syslog prefixing and filter achoring
|
2013-10-01 15:14:33 -07:00 |
Daniel Black
|
ba8183b116
|
Merge pull request #372 from grooverdan/uw-imap
ENH: filter.d/uwimap-auth added. Closes #18
|
2013-10-01 15:13:11 -07:00 |
Daniel Black
|
262616f7a7
|
ENH: filter.d/uwimap-auth - failure of an admin override to regex
|
2013-10-01 22:32:57 +10:00 |
Daniel Black
|
9211179d30
|
ENH: filter.d/uwimap-auth - add "disabled" to regex
|
2013-10-01 22:10:33 +10:00 |
Daniel Black
|
791183b639
|
ENH: filter.d/uwimap-auth - add SYSTEM BREAK-IN ATTEMPT
|
2013-10-01 10:10:53 +10:00 |
Daniel Black
|
778f09debe
|
DOC/ENH: __md5hex regex defination to common.conf. Document debian bug #
|
2013-10-01 09:03:33 +10:00 |
Daniel Black
|
b3b62d65bf
|
ENH: filter.d/uwimap-auth added. Closes #18
|
2013-09-29 18:06:27 +10:00 |
Daniel Black
|
f2ae20a3b8
|
BF: filter.d/sshd group on md5hex and () for serial needed to be escaped
|
2013-09-29 17:44:45 +10:00 |
Daniel Black
|
1eeb6e94bd
|
BF: fix regex for openssh-6.3
|
2013-09-29 17:28:33 +10:00 |
Daniel Black
|
8c2a5612ed
|
DOC: resolve ChangeLog conflicts
|
2013-09-19 19:38:28 +10:00 |
Daniel Black
|
2a805452c6
|
DOC: resolve ChangeLog conflicts
|
2013-09-19 19:28:39 +10:00 |
Daniel Black
|
8e9fab9b3c
|
Merge branch 'master' of https://github.com/fail2ban/fail2ban
|
2013-09-19 19:25:47 +10:00 |
Daniel Black
|
3be7dcd701
|
DOC: resolve ChangeLog conflicts
|
2013-09-19 19:23:02 +10:00 |
Daniel Black
|
89e0520675
|
ENH: dovecot regex to match failure reported by Bob Cohen on mailing list
|
2013-09-19 08:25:50 +10:00 |
Daniel Black
|
c3ee03b9ba
|
BF: fix daemon name typo for filter proftpd
|
2013-09-18 07:32:26 +10:00 |
Daniel Black
|
39ca8837eb
|
TST: pureftpd - syslog therefore use syslog prefixes in filter
|
2013-09-17 22:24:56 +10:00 |
Daniel Black
|
30bb1a77a3
|
ENH: added syslog prefix to pam-generic filter. Disable regex match for pre 2006 (< 0.99.2.0) versions on linux-pam
|
2013-09-17 10:50:46 +10:00 |
Daniel Black
|
ee497ff1cb
|
ENH: filter mysqld-auth can be a is a syslog based service so anchor it using syslog prefix
|
2013-09-17 07:57:19 +10:00 |
Daniel Black
|
13ec9d58c0
|
ENH: filter gssftpd is a syslog based service so anchor it using syslog prefix
|
2013-09-17 07:25:23 +10:00 |
Daniel Black
|
673cc4d77f
|
ENH: anchor at end of recidive filter
|
2013-09-16 18:43:56 +10:00 |
Daniel Black
|
504111b0b1
|
ENH: filter.d/recidive - anchor regex at start and support f2b SYSLOG target
|
2013-09-16 01:22:42 +10:00 |
Daniel Black
|
6b0e2289d4
|
Merge pull request #335 from grooverdan/gh-333-bind
ENH: filter.d/named-refused.conf - BIND 9.9.3 regex changes. Closes gh-333
|
2013-08-30 21:34:22 -07:00 |
Daniel Black
|
15f2f38972
|
ENH: anchor regex at start
|
2013-08-28 12:32:40 +10:00 |
Daniel Black
|
d5684a0834
|
BF: filter.d/routecube-auth - time offset can be positive or negative
|
2013-08-28 11:57:38 +10:00 |
Daniel Black
|
a401d11644
|
ENH: add regex for bad zone transfer request/ TST: add test for bind-9.9 zone transfer denied
|
2013-08-28 00:53:08 +10:00 |
Yaroslav Halchenko
|
265a85ec1f
|
RF: do not catch for now "invalid nonce \S* received - hash is not \S*" -- imho needs more analysis
|
2013-08-26 09:48:56 -04:00 |
Daniel Black
|
b8e7d0b867
|
ENH: further tighten lighttpd basic auth regex
|
2013-08-26 08:51:40 +10:00 |
Daniel Black
|
a7ebb84a7d
|
ENH: tighted up lighttpd regex
|
2013-08-26 08:42:45 +10:00 |
François Boulogne
|
e133b9f1d1
|
MAINT: add support for lightty1.4.31
|
2013-08-25 21:29:43 +02:00 |
Daniel Black
|
ca4729e943
|
ENH: filter.d/exim.conf - add authentication failures for "plain" authentication
|
2013-08-25 23:02:10 +10:00 |
Daniel Black
|
ef903db3c9
|
ENH: filter.d/named-refused.conf - BIND 9.9.3 regex changes. Closes gh-333
|
2013-08-25 22:44:30 +10:00 |
Daniel Black
|
cfb7dba268
|
DOC: merge ChangeLog
|
2013-08-25 21:26:13 +10:00 |
Daniel Black
|
b589533d69
|
Merge branch 'master' into kwirk-merge
Conflicts:
ChangeLog
testcases/files/logs/dropbear
|
2013-08-25 21:21:14 +10:00 |
Daniel Black
|
fd7cc5bda7
|
BF: duplicate regex match fixed
|
2013-08-25 21:13:11 +10:00 |
Daniel Black
|
6a56727669
|
BF: apache-common regex - datetime could be entirely consumed
|
2013-08-25 18:30:30 +10:00 |
Daniel Black
|
a9eb8a76c6
|
merge of change log and apache-auth differences
|
2013-08-25 16:51:35 +10:00 |
Steven Hiscocks
|
4e5feed7fc
|
Merge pull request #8 from grooverdan/gh-303-merge-2
training space on wuftp
|
2013-08-21 12:21:09 -07:00 |
Daniel Black
|
aad7d08451
|
BF: disable filter expressions without tests
|
2013-08-20 07:33:35 +10:00 |
Daniel Black
|
c44328b1a3
|
ENH: new "realm mismatch" message from https://issues.apache.org/bugzilla/show_bug.cgi?id=55284#c8
|
2013-08-19 22:04:55 +10:00 |
Daniel Black
|
ea7cba4205
|
ENH: trailing space as per discussion on gh-303
|
2013-08-19 21:42:43 +10:00 |
Daniel Black
|
61d43608ae
|
ENH: filter.d/postfix - add filter for VRFY. Closes gh-322
|
2013-08-19 18:42:39 +10:00 |
Daniel Black
|
5d451bc4d6
|
ENH: add refused zone tranfer to named-refused filter. closes #323
|
2013-08-18 22:19:31 +10:00 |
Steven Hiscocks
|
53e16e07ad
|
ENH: Minor tweak on previous commit proftpd regex changes
|
2013-08-09 19:04:26 +01:00 |
Steven Hiscocks
|
9002de069e
|
ENH: Improve proftpd regex.
Taken from @yarikoptic comment:
https://github.com/fail2ban/fail2ban/pull/303#discussion_r5687500
|
2013-08-09 18:54:08 +01:00 |
Yaroslav Halchenko
|
4e0ddc5f67
|
ENH: hardened added dropbear failregex to avoid trailing .* and enclose username in ''
|
2013-08-08 09:58:36 -04:00 |
Yaroslav Halchenko
|
9487ee5562
|
minor: consistent indentation in dropbear.conf
|
2013-08-08 09:54:15 -04:00 |
Daniel Black
|
d8883f4346
|
DOC: Notes about 401 responses and how apache logs this
|
2013-07-29 08:59:25 +10:00 |
Daniel Black
|
7b2773889d
|
TST: apache-auth filter - nonce timetravel tests + other expression fixes
|
2013-07-29 02:29:04 +10:00 |