15ce210cd0
BF: apache-* jails -- authentication failures are recorded in *error.log files, thus paths were adjusted
2008-03-05 23:14:22 -05:00
9ab6db30c7
Merge branch 'debian' into build
...
* debian: (56 commits)
Imported upstream version 0.8.2
debian/watch: switched to git-import-orig
- Tag for 0.8.2
- Updated for 0.8.2
- Updated e-mail
- Changed homepage and e-mail
- Updated copyright.
- readline is now optional in fail2ban-client (not needed in fail2ban-server).
- Added svn:keywords
- Fixed Debian bug #461426
- Fixed Debian bug #462060
- Fixed Debian bug #468477
- Fixed Debian bug #456567
- Added revision.
- Added "reload <JAIL>"
- Replaced "reject" with "drop" in shorwall action. Fix #1854875
- Replaced "echo" with "printf" in actions. Fix #1839673
- Catch Exception instead of AttributeError.
- Absorbed some Debian patches. Thanks to Yaroslav Halchenko.
- Updated.
...
Conflicts:
config/fail2ban.conf
config/filter.d/proftpd.conf
config/filter.d/sshd.conf
man/fail2ban-client.1
man/fail2ban-server.1
server/datestrptime.py
server/server.py
2008-03-05 22:30:10 -05:00
940d7fa430
debian/watch: switched to git-import-orig
2008-03-05 20:18:50 -05:00
e43ea8e1b3
releasing -5
2008-02-28 19:52:37 -05:00
0392274daf
added 0.8.1-4 changelog entry.
2008-02-09 22:09:50 -05:00
b8d97d0983
Merge branches 'debian', 'deb/specifics', 'up/0.9-0.8', 'up/apache_noscript_extend', 'up/ipmasq', 'up/log_examples', 'up/mail_whois_lines', 'up/named_refused_fixed', 'up/pam_generic', 'up/proftpd_fix+extend', 'up/sshd_refused_connect' and 'up/vsftpd_optional_user' into build
...
* debian:
Confirms to policy 3.7.3 (no changes)
Bye Bye dpatch: now everything is handled in git branches
removing patches from dpatch system since they are in branches now
added a comment to README.Debian and to the list of examples for ipmasq example file
Fixed == bashism (Closes : #464647 ). Thanks Raphael Geisser
* deb/specifics:
slight tune ups in upstream sources destined only for debian are kept in this branch
* up/0.9-0.8:
* up/apache_noscript_extend:
Extended apache-noscript filter with more file extensions and to react to "script not found or unable to stat" log message (closes : #456565 ). Thanks Tim Connors
* up/ipmasq:
Added ipmasq rule file to restart fail2ban when iptables are wiped out (closes : #461417 ). Thanks Guido Bozzetto
* up/log_examples:
up/log_examples: moved vsftpd log from up/vsftpd_optional_user
added examples of log lines (for named-refused, pam-generic, sshd) under files/logs for easy testing
* up/mail_whois_lines:
mail-whois-lines: moved fix for proper names from dpatch
* up/named_refused_fixed:
named_refused: moved fix for proper config+filters from dpatch
* up/pam_generic:
added pam-generic from dpatch
* up/proftpd_fix+extend:
Fix/extension of proftpd failrexes (Closes : #461412 ). Thanks Guido Bozzetto
* up/sshd_refused_connect:
* up/vsftpd_optional_user:
up/vsftpd_optional_user: moving examples into up/examples branch
BF: vsftp anchoring
2008-02-09 22:02:21 -05:00
fc3a57b6c1
Confirms to policy 3.7.3 (no changes)
2008-02-08 01:23:34 -05:00
4b2bd7e776
Bye Bye dpatch: now everything is handled in git branches
2008-02-08 00:52:04 -05:00
a832ede291
removing patches from dpatch system since they are in branches now
2008-02-08 00:46:00 -05:00
996da9a3f0
added a comment to README.Debian and to the list of examples for ipmasq example file
2008-02-07 23:43:21 -05:00
0da36545d3
Fixed == bashism ( Closes : #464647 ). Thanks Raphael Geisser
2008-02-07 23:43:21 -05:00
24d8b44c2a
* Moved iptables into recommends since fail2ban can work without iptables
...
using some other action (e.g hosts.deny)
2007-11-23 12:50:39 -05:00
fa21222c63
* Moved iptables into recommends since fail2ban can work without iptables
...
using some other action (e.g hosts.deny)
2007-11-23 12:49:15 -05:00
ee25282f34
releasing 0.8.1-3
2007-11-23 11:43:41 -05:00
6b913aafa2
Merge branch 'debian' into build: Vcs fields
...
Conflicts:
debian/changelog
2007-11-23 11:10:35 -05:00
f8b17f3859
* Added Vcs- fields, moved Homepage into source header's field
2007-11-23 11:09:34 -05:00
4b95233acb
Merge branches 'debian' and 'up/sshd_refused_connect' into build: NF: refused connect sshd failregex
2007-11-23 09:02:58 -05:00
46cfc2bbd6
added example for "refused connect"
2007-11-23 09:00:08 -05:00
d82257b2f2
Merge branch 'debian' into build: BF: no sftp in ssh jails
2007-11-22 14:34:59 -05:00
1cedd8e02b
BF: removed sftp from ssh jails
2007-11-22 14:32:17 -05:00
4aa9bca7ca
Merge branch 'up/0.9-0.8' into build and provided debian/changelog
2007-11-11 01:21:44 -05:00
2553e2717a
* Added force-start action to init script, so it could be forced
...
to start if previous run crashed and left a socket file. Must to be
used with caution.
2007-10-18 22:03:37 -04:00
8d9aca4e20
* Fixed named-refused filter.
2007-10-16 17:02:35 -04:00
99dbe90ad2
releasing
2007-10-16 17:02:35 -04:00
413ec5317e
first pre-release version of 0.8.1
2007-10-16 17:02:35 -04:00
0012f9ff92
* (NOT RELEASED YET) New upstream release.
...
Patches absorbed upstream:
00_daemon_pids.dpatch
00_iptables_allports.dpatch
00_vsftp_filter_spaces.dpatch
00_resolve_all_names.dpatch
00_HOST_ignoreregex.dpatch
Patches which needed some tune-up:
00_ssh_strong_re.dpatch
00_mail-whois-lines.dpatch
00_named_refused.dpatch
2007-10-16 17:02:35 -04:00
e10a8616b4
fetched fresh upstream 0.8.1
2007-10-16 17:02:35 -04:00
922b5035ea
actually we never released pre-release
2007-10-16 17:02:35 -04:00
85b75c77fb
* Resolve all "names" which became a part of <HOST>. Previousely only fqdn's
...
were resolved
2007-08-13 21:13:59 +00:00
c5202ce696
* Added optional spaces at the end of failregex for vsftpd.
2007-08-06 01:39:30 +00:00
58ae2a5a75
* Added new time template matching named log entries
2007-07-30 02:31:35 +00:00
95d17ee318
* Adjusted failregex for sshd filter:
...
- anchored properly at the end of line, and source code has .examples
files to perform testing of the rules.
- added new explicit rule for users not in the AllowUsers lists
2007-07-29 17:20:23 +00:00
3aef16b773
* jail.conf has specification of protocol (default to tcp) to be provided to
...
banaction
2007-07-25 03:47:32 +00:00
990bd15dd5
specified default protocol (tcp) and specified udp for jail for named
2007-07-25 03:46:41 +00:00
ac7e1696d4
fixed named filter to account for optional (cache)
2007-07-24 20:04:20 +00:00
14d3ffc6de
* Added a filter for named to catch refused/denied queries
2007-07-24 18:10:05 +00:00
2a3d710cad
adjusted pam_generic patch in example to catch ftp
2007-07-24 17:25:38 +00:00
d63bea24f5
tuned pam_generic to catch some weird log lines
2007-07-21 02:29:45 +00:00
a843d0da04
tuned pam_generic to catch some weird log lines
2007-07-21 02:27:30 +00:00
f58421eabf
* Use /var/run to keep socket file ( closes : #425746 )
2007-07-05 17:12:17 +00:00
a9ecd98ffe
Added port param in jail since otherwise -- crashes
2007-06-25 17:08:49 +00:00
2e55bc57c7
* Added a filter pam_generic to catch any login errors.
...
* Added iptables-allports.
2007-06-25 16:51:05 +00:00
bc0806d459
* Moved <HOST> expansion into regex.py ( closes : #429263 ). Thanks James
...
Andrewartha.
* Added optional regexp entry for process PID in some entries (closes:
#426050 ). Thanks Roderick Schertler.
2007-06-21 01:47:02 +00:00
cc5ec4dcde
releasing
2007-05-16 18:14:13 +00:00
e55dfeaf3a
untabified last entry
2007-05-15 14:37:09 +00:00
cc1ed23b40
* Applied changes submitted by Bernd Zeimetz (thanks Bernd):
...
- Removed obsolete Build-Depends-Indep on help2man, python-dev
- Explicit removal of *.pyc files compiled during build
- Invoke 'python setup.py clean' in clean target, which required also
to move python into Build-Depends
* Minor clean up of debian/rules
2007-05-15 14:26:28 +00:00
be824f4e00
adjusted to be prerelease of the package
2007-05-10 15:35:43 +00:00
c58a100259
* Manually changing the order of debhelper inserted scripts in prerm
...
(Closes : #422655 )
* Removed obsolete hack to have /bin/env invocation of python for
fail2ban-* scripts
2007-05-10 15:34:09 +00:00
e9397ea375
* New stable upstream release
2007-05-05 16:35:58 +00:00
10718c1036
initial upgrade to 0.8.0
2007-05-05 16:17:50 +00:00
d15f9d0206
* New upstream release
...
* Updated copyright to include current year
* Removed patches absorbed upstream
2007-04-20 01:44:43 +00:00
5dcec130f6
adjusted changelog -- releasing finally
2007-03-26 21:53:30 +00:00
7c30a3097b
* Applied post-release upstream changes to resolve issues with
...
- Close opened handlers to log file
- Fixed "reload" bug
2007-03-26 21:47:10 +00:00
dc21820c80
adjusted paths in patches
2007-03-24 22:40:42 +00:00
d345865621
* New upstream release
...
* Applied post-release changes to resolve issues with gamin and not closed
on reload log file
2007-03-24 22:27:09 +00:00
ee3f91176c
* New upstream release (included most of the debian-provided patches -- new
...
filters and actions)
* Refreshed and made verbatim homepage in description
2007-02-09 03:22:15 +00:00
a4c15ea883
* NOT RELEASED YET
...
* Made homepage in description verbatim
2007-02-07 15:25:11 +00:00
936fee7c40
* Use /usr/bin/python interpreter instead of wrapped call to python by
...
/usr/bin/env
2007-01-19 16:08:10 +00:00
30eb0566bd
making it using /usr/bin/python directly
2007-01-19 15:56:21 +00:00
f92e887994
minor more changes
2007-01-19 15:53:21 +00:00
878fa0dedd
* Synchronized action.d/iptables-* rules from upstream SVN (closes:
...
#407561 )
* Minor: options renames in the comments to be in sync with upstream
2007-01-19 15:51:11 +00:00
e3102eb28a
had to rename filter for courierauth
2007-01-18 15:52:48 +00:00
7a1dd9e98c
* iptables-multiport is default action to take since Debian kernel arrives
...
with multiport module. That is to address the fact that most services
listen on multiple port (for encrypted and non-encrypted connections)
* Added [courierauth] jail (First 2 items are to partially address #407404
2007-01-18 15:41:49 +00:00
85d8604209
removed empty lines
2007-01-04 20:34:41 +00:00
36b1833e31
* Adjusted default log file for postfix to be /var/log/mail.log
...
(Closes : #404921 )
2007-01-04 20:25:45 +00:00
acfebf3475
adjusted multiport section as promised in changelog
2007-01-04 20:19:58 +00:00
e570f14a5d
releasing
2007-01-04 19:48:58 +00:00
f01c74581d
fixed action_ shortcuts
...
adjusted initd script to be verbose on start if socketfile exists
2007-01-04 19:47:00 +00:00
7fa686a7f2
* New upstream release, which incorporates fixes introduced in 3~pre
...
non-released versions (which were suggested to the users to overcome
problems reported in bug reports). In particular attention should be paid
to upstream changelog entries
- Several "failregex" and "ignoreregex" are now accepted.
Creation of rules should be easier now.
This is an alternative solution to 'multiple <HOST>' entries fix,
which is not applied to this shipped version - pay cautios if upgrading
from 0.7.5-3~pre?
- Allow comma in action options. The value of the option must
be escaped with " or '.
That allowed to implement requested ability to ban multiple ports
at once (See 373592). README.Debian and jail.conf adjusted to reflect
possible use of iptables-mport
- Now Fail2ban goes in /usr/share/fail2ban instead of
/usr/lib/fail2ban. This is more compliant with FHS.
Patch 00_share_insteadof_lib no longer applied
* Refactored installed by debian package jail.conf:
- Added option banaction which is to incorporate banning agent
(usually some flavor of iptables rule), which can then be easily
overriden globally or per section
- Multiple actions are defined as action_* to serve as shortcuts
2007-01-04 18:08:09 +00:00
e8ce484c05
reworked init script a bit: waiting on stop and ping instead of status
2007-01-04 17:03:35 +00:00
a81dd8b103
boosted version
2007-01-03 16:09:43 +00:00
97ab74de5f
* Not applying patch any more for rigid python2.4 - it is default now in
...
sid/etch
2007-01-03 16:09:01 +00:00
4d5ec804f5
* Added filter ssh-ddos to fight DDOS attacks. Must be used with caution if
...
there is a possibility of clients accessing through unreliable connection
(Closes : #404487 )
2006-12-28 07:28:53 +00:00
832a8a4346
* Moved call to dh_pycentral before dh_installinit
...
* Removed unnecessary call of dh_shlibdeps
2006-12-22 18:56:51 +00:00
ebc5c6106f
HOSTisized vsftpd regex
2006-12-22 18:39:57 +00:00
caf85bf265
* Made fail2ban-server tollerate multiple <HOST> entries in failregex
2006-12-22 18:36:01 +00:00
ae96eaa40c
made failregex universal for both PAM and native vsftpd logging
2006-12-22 04:54:14 +00:00
2e992c2353
* Fail2ban now bans vsftpd logins (corrected logfile path and failregex)
...
(Closes : #404060 )
2006-12-21 16:54:39 +00:00
14a2a45dbc
releasing
2006-12-10 23:56:17 +00:00
762d1a188a
* NEWS.Debian confusions - the latest NEWS entry and postinst message were
...
rephrased (Closes : #402350 )
* Added mail-whois-lines action, which emails log lines containing abuser
IP. Those lines are often required for proper abuse reports sent to the
Internet providers. Forwarding of such received emails to the email
addresses of abuse departments present in the output of whois is a
tentative solution for semi-automatic abuse reporting (Closes : #358810 )
2006-12-10 23:40:04 +00:00
bbb9e6f094
* NEWS.Debian confusions - the latest NEWS entry and postinst message
...
were rephrased (Closes : #402350 )
2006-12-09 23:27:39 +00:00
ae58ed091a
* Removed obsolete patches left from 0.6
...
* Adjusted wsftpd patch to use <HOST> tag to be in line with the other
filter definitions
2006-12-08 02:28:07 +00:00
1755dc2b0a
updated the patch to the most recent release
2006-12-08 02:12:22 +00:00
7eac83b12d
fresh upstream release
2006-12-08 01:21:42 +00:00
6d3c52a965
slightly corrected description for interpolations/parameters
2006-12-07 23:10:30 +00:00
c46b9e0dca
* README.Debian describes a bit issue of interpolations vs parameters passed
...
from jail.{conf,local} into an action or a filter definition (closes:
#398739 )
* Removed Uploaded field from control since I am a DD now. Big thanks to
Barak Pearlmutter for being the sponsor of my packages for few
years.
2006-12-07 13:20:51 +00:00
3a738497f8
* Added Suggests on mailx and relevant comments in README.Debian about
...
invoking mail actions (closes : #396668 )
* Removed obsolete entries in TODO and README
* README.Debian describes a bit issue of interpolations vs parameters
passed from jail.{conf,local} into an action or a filter definition
(closes : #398739 )
* Initial version of postfix filter (closes : #377711 )
2006-12-07 04:07:59 +00:00
ff491e48fa
* Added debian/backports to contain patches necessary for backporting. It
...
gets used by pbuilder-ssh to create package for backports.org
2006-12-04 13:56:56 +00:00
e46346d371
fixed name spoiled by on vaio
2006-11-12 02:20:32 +00:00
953f6c75b9
ready to buzz Barak
2006-11-12 02:18:47 +00:00
b9b30341d4
* Cleaned up debian/rules a bit
2006-11-12 02:11:34 +00:00
f8a3605c97
* "Clean" target removes generated .pyc files now ( Closes : #398146 )
2006-11-12 02:02:23 +00:00
97abba906f
forgot to boost version
2006-11-11 00:11:59 +00:00
24ada3c63e
* Only block new connects by using a new action iptables-new instead of
...
iptables (Closes : #350746 )
* Updated README.Debian to reflect transition over to 0.7 branch and to
comment on 350746
2006-11-11 00:10:10 +00:00
5cc9bc9ce6
made ~ version to accumulate more fixes before duploading
2006-11-10 15:56:58 +00:00
6a9ed3501a
* Reincarnated logrotate configuration ( Closes : #397878 )
...
* no logrotation anymore? (Closes : #397878 )
2006-11-10 15:54:34 +00:00
f92a885d43
copied logrotate from 0.6 branch
2006-11-10 14:59:19 +00:00
f4015e0c3c
forgotten fi
2006-11-06 14:49:40 +00:00
28dad3752c
* Warning NEWS entry for 0.7.1 was not shown during installation on test
...
boxes, thus postinst was adjusted accordingly to inform the user about the
changes in the configuration files since 0.6.
2006-11-06 14:47:59 +00:00
6e1ec60318
put release to unstable
2006-11-06 14:29:56 +00:00
Yaroslav Halchenko