sebres
51cae63bf0
more precise by test
10 years ago
sebres
4244c87802
ConfigWrapper class introduced: sharing of the same ConfigReader object between JailsReader and JailReader (don't read jail config each jail);
...
sharing of the same DefinitionInitConfigReader (ActionReader, FilterReader) between all jails using that;
cache of read a config files was optimized;
test case extended for all types of config readers;
10 years ago
sebres
2a54e61238
config cache optimized - prevent to read the same config file inside different resources multiple times;
...
test case: read jail file only once;
10 years ago
sebres
af4b48e841
test case for check the read of config files will be cached;
10 years ago
pacop
ce4f2d1c88
added filter for PortSentry with jail and samples
10 years ago
pacop
37acc6b832
ENH: Add dateTime format for PortSentry
...
Added dateTime format for PortSentry with EPOCH format
10 years ago
sebres
d00af327c5
caching of read config files, to make start of fail2ban faster, see issue #820
10 years ago
Yaroslav Halchenko
05fcb1f104
Merge pull request #813 from schaal/tests-configdir-env-variable
...
tests: Add function to utils to calculate CONFIG_DIR
10 years ago
Daniel Schaal
270ea363d3
tests: define CONFIG_DIR in utils.
10 years ago
Yaroslav Halchenko
b912d61ccb
Merge pull request #818 from slowriot/master
...
adding filter to detect Shellshock attack attempts with Apache
10 years ago
SlowRiot
5d526bbeb1
forgot to add test case to last commit
10 years ago
SlowRiot
7b5dc9f24f
adding test case, changelog and thanks entries for apache shellshock filter
10 years ago
SlowRiot
fc5f729f01
adding jail conf for shellshock filter
10 years ago
SlowRiot
4f636eb0e3
adding filter to detect Shellshock attack attempts against bash scripts through apache. See http://seclists.org/oss-sec/2014/q3/650
10 years ago
Yaroslav Halchenko
bfaf33b6ba
Merge pull request #812 from nickweeds/master
...
Issue #810 : Update apache-auth.conf filter to match AH01630: client denied by server configuration
10 years ago
Nick Weeds
2c158fe168
Add apache filter for AH01630 client denied by server configuration
10 years ago
Yaroslav Halchenko
caa851e5c8
RF: moving logwatch setup/sample logs under files/logwatch
10 years ago
Yaroslav Halchenko
8f521b8551
DOC: Changelog and THANKS for previous changes
10 years ago
Yaroslav Halchenko
0e1f8f7f39
RF: remove those two additional failregexes for the postfix
...
see comment
https://github.com/fail2ban/fail2ban/pull/804\#discussion_r17512426
10 years ago
Yaroslav Halchenko
96c20c8379
Merge pull request #804 from pleasantone/master
...
Add support for postfix/submission/smtpd matching.
10 years ago
Yaroslav Halchenko
c58c4de9bc
ENH: add empty ignoreregex to avoid a warning ( Close #805 )
10 years ago
Dean Lee
ba44ff312b
grep IP at the start of lines
...
I'm not sure if this regex works best, so I'm patching this single file as a sample.
Don't forget to update `mail-whois-lines.conf` after this patch got merged.
For the following logs, `grep '[^0-9]199.48.161.87[^0-9]'` will output nothing, while `grep '\([^0-9]\|^\)199.48.161.87[^0-9]'` works:
<pre>199.48.161.87 - - [09/Sep/2014:13:38:54 +0800] "POST /wp-login.php HTTP/1.1" 403 4674 "-" "Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.0" - hitsjapan.com
199.48.161.87 - - [09/Sep/2014:13:38:56 +0800] "POST /wp-login.php HTTP/1.1" 403 4674 "-" "Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.0" - hitsjapan.com
199.48.161.87 - - [09/Sep/2014:13:38:58 +0800] "POST /wp-login.php HTTP/1.1" 403 4674 "-" "Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.0" - hitsjapan.com
199.48.161.87 - - [09/Sep/2014:13:39:00 +0800] "POST /wp-login.php HTTP/1.1" 403 4674 "-" "Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.0" - hitsjapan.com
199.48.161.87 - - [09/Sep/2014:13:39:05 +0800] "POST /wp-login.php HTTP/1.1" 403 4674 "-" "Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.0" - hitsjapan.com
199.48.161.87 - - [09/Sep/2014:13:39:05 +0800] "POST /wp-login.php HTTP/1.1" 403 4674 "-" "Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.0" - hitsjapan.com
199.48.161.87 - - [09/Sep/2014:13:39:13 +0800] "POST /wp-login.php HTTP/1.1" 403 4674 "-" "Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.0" - hitsjapan.com
199.48.161.87 - - [09/Sep/2014:13:39:21 +0800] "POST /wp-login.php HTTP/1.1" 403 4674 "-" "Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.0" - hitsjapan.com
199.48.161.87 - - [09/Sep/2014:13:39:32 +0800] "POST /wp-login.php HTTP/1.1" 403 4674 "-" "Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.0" - hitsjapan.com
199.48.161.87 - - [09/Sep/2014:13:39:34 +0800] "POST /wp-login.php HTTP/1.1" 403 4674 "-" "Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.0" - hitsjapan.com
199.48.161.87 - - [09/Sep/2014:13:39:34 +0800] "POST /wp-login.php HTTP/1.1" 403 168 "-" "Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.0" - hitsjapan.com
199.48.161.87 - - [09/Sep/2014:13:39:34 +0800] "POST /wp-login.php HTTP/1.1" 403 168 "-" "Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.0" - hitsjapan.com
199.48.161.87 - - [09/Sep/2014:13:39:35 +0800] "POST /wp-login.php HTTP/1.1" 403 168 "-" "Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.0" - hitsjapan.com
199.48.161.87 - - [09/Sep/2014:13:39:35 +0800] "POST /wp-login.php HTTP/1.1" 403 168 "-" "Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.0" - hitsjapan.com
199.48.161.87 - - [09/Sep/2014:13:39:35 +0800] "POST /wp-login.php HTTP/1.1" 403 168 "-" "Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.0" - hitsjapan.com</pre>
10 years ago
Paul Traina
249e169d8e
Update test cases and also suport smtps per request.
10 years ago
Daniel Black
1864f75b3b
Credits and notes from #806
10 years ago
weberho
d2c086b187
fixed encoding
10 years ago
weberho
218ffe862e
fixed encoding
10 years ago
Paul Traina
544cfaff2c
Add support for postfix/submission/smtpd matching.
10 years ago
Yaroslav Halchenko
0d9cfb84e3
Merge pull request #778 from yarikoptic/enh/symbiosis
...
ENH: symbiosis-blacklist-allports action
10 years ago
Yaroslav Halchenko
426ed7ff2f
Merge pull request #780 from opoplawski/logpath
...
Fxi jail.conf to use more syslog macros
10 years ago
Yaroslav Halchenko
b1c04f5fa2
ENH: print rebans stats even if no "Failures" are logged, and reduce indentation in output
10 years ago
Yaroslav Halchenko
decea64cf9
ENH: untabified and reindented entire script for sane formatting (no functional changes)
10 years ago
Yaroslav Halchenko
8b62353ab0
BF: logwatch -- fixing up regex for 'already banned'
10 years ago
Yaroslav Halchenko
3bd36ba40a
Sample logfiles to test logwatch services script
10 years ago
Yaroslav Halchenko
93243e7d57
ENH: Ignore errors while unbaning in symbiosis firewall
...
Fail2Ban at times "interfers" with the firewall reflashing thus leading
to the sporadic errors. IMHO should be safe to ignore
10 years ago
Yaroslav Halchenko
f756278fe5
ENH: just a bit more descriptive exception ;-)
10 years ago
Yaroslav Halchenko
12c3bf1058
Merge pull request #784 from yarikoptic/enh/testnologfile
...
ENH/BF(TST): making permissions restrictive is not sufficient
10 years ago
Yaroslav Halchenko
b2a1032f57
ENH/BF(TST): making permissions restrictive is not sufficient -- really remove file to test
10 years ago
Yaroslav Halchenko
3576c509f5
changelog entry for postfix-sasl fix
10 years ago
Yaroslav Halchenko
b4194fb1d1
Merge pull request #783 from maisonobe/master
...
added systemd configuration for postfix-sasl.conf
10 years ago
Luc Maisonobe
763115b1eb
added systemd configuration for postfix-sasl.conf
10 years ago
Yaroslav Halchenko
aee560b1c6
Merge branch 'master' of git://github.com/fail2ban/fail2ban
...
* 'master' of git://github.com/fail2ban/fail2ban:
1.5 version of Fail2ban logwatch file
Fix typos.
10 years ago
Yaroslav Halchenko
6fc04c2256
Merge branch 'bf+enh/cyrus-imap' of https://github.com/yarikoptic/fail2ban (with some tune up to Changelog entry)
...
* 'bf+enh/cyrus-imap' of https://github.com/yarikoptic/fail2ban :
ENH: cyrus-imap -- catch also 'user not found' attempts
BF: cyrus-imaps -- catch also for secured daemons
Conflicts:
ChangeLog
10 years ago
Yaroslav Halchenko
f403bad0ab
Merge pull request #775 from alimony/patch-1
...
Fix typos.
10 years ago
Yaroslav Halchenko
b0f26fa391
Adjusting fail2ban logwatch script to match lines from 0.9 as well
...
File itself includes additional log information about changes
10 years ago
Yaroslav Halchenko
7e902a1320
1.5 version of Fail2ban logwatch file
...
as copied from Debian package 7.4.0+svn20131108rev175-1
10 years ago
Yaroslav Halchenko
b79a82ebdd
minor typo
10 years ago
Orion Poplawski
6b554fbe98
Fxi jail.conf to use more syslog macros
10 years ago
Yaroslav Halchenko
818dd59d65
ENH: symbiosis-blacklist-allports action
10 years ago
Markus Amalthea Magnuson
7b76322898
Fix typos.
10 years ago
Yaroslav Halchenko
d8c7cc2832
Merge pull request #764 from craneworks/master
...
Adding vagrant support
10 years ago