Steven Hiscocks
1c7d28d1ea
TST: Add qmail sample log
12 years ago
Steven Hiscocks
5437f5fe90
TST: Add gssftpd sample log
12 years ago
Steven Hiscocks
f7d8e68738
TST: Add apache-badbots sample log
12 years ago
Steven Hiscocks
37f240bef0
TST: Add sample log for php-url-fopen filter
12 years ago
Steven Hiscocks
cf1e5bdbc2
ENH: Tweak proftpd regex and add sample logs
...
Needed to add optional ":" post __pid_re, and for consistency, decided
to make use of __prefix_line instead which includes this.
12 years ago
Steven Hiscocks
e59a4960a3
TST: Add additional sample log line for apache-noscript
12 years ago
Steven Hiscocks
8b9bafda79
ENH: Change lighttpd-fastcgi to suhosin, and improve regex and samples
...
suhosin is hardened php implmentation, which will log the alerts (as
seen in samples) to stderr, which is picked up by fastcgi webserver
(e.g. lighttpd, apache, nginx)
12 years ago
Steven Hiscocks
4033857f63
ENH: Improve xinetd-fail regex and add sample logs
12 years ago
Steven Hiscocks
b5ffbced37
TST: Sample test cases now handle ignoreregex and add recidive samples
12 years ago
Steven Hiscocks
e7b7815de3
TST: Add additional sshd sample logs
12 years ago
Steven Hiscocks
a11f91b835
ENH: Improve cyrus-imap regex and add extra sample line
12 years ago
Steven Hiscocks
534be189dc
ENH: Improve sieve regex and add sample line
12 years ago
Steven Hiscocks
d791ba12ba
TST: Add sample log for dropbear filter
12 years ago
Steven Hiscocks
ab671b0b1a
ENH: Improve wuftpd failregex, drop duplicate pam regex and add sample
...
For wu-ftpd configured to use pam, the pam filter used be used, as regex
is more robust.
12 years ago
Steven Hiscocks
57a6c11260
ENH: Improve courierlogin regex and add sample logs
12 years ago
Steven Hiscocks
bd175f0267
ENH: Improve cyrus-imap regex and add sample log file
12 years ago
Steven Hiscocks
83a80a29ea
ENH: Improve couriersmtp and add sample logs
12 years ago
Steven Hiscocks
eb2f0c9272
ENH: Improve postfix regex and add more samples
12 years ago
Steven Hiscocks
a012b54117
TST: Add additional postfix filter sample
12 years ago
Steven Hiscocks
2a3a627322
TST: Add sample for sieve regex
12 years ago
Steven Hiscocks
bf05f2ac95
Merge branch 'filter-failregex-return'
...
Conflicts:
server/filter.py
12 years ago
Yaroslav Halchenko
f6a8a04cf3
ENH: roundcube-auth - adopt for current format with trailing error message. thanks @kwirk for the review/feedback
...
I also used non-greedy .*? for the login portion since not sure if space could
be there and trying to minimize possibility of reacting on injected "from
<HOST>" somewhere within the trailing .*
12 years ago
Yaroslav Halchenko
0a02cfe9e8
ENH: <HOST> must end with alphanumeric \w (not a dot or a dash etc)
...
Otherwise <HOST> regexp might swallow period in the sentence right after the address.
I have decided to enforce alphanumeric instead of switching to non-greedy +? ... because
I think it is closer to what we actually want here
12 years ago
Steven Hiscocks
1a2b6442a0
ENH+BF+TST: Filter now returns reference to failregex and ignoreregex
...
This avoids duplication of code across fail2ban-regex and samples test
cases. This also now more neatly resolves the issue of double counting
date templates matches in fail2ban-regex.
In addition, the samples test cases now also print a warning message
that not all regexs have samples for them, with future plan to change
this to an assertion.
12 years ago
Steven Hiscocks
4855cae487
Merge branch 'sample-log-meta-data'
...
Conflicts:
testcases/files/logs/dovecot
12 years ago
Steven Hiscocks
1116f23151
TST: Sample log regex test now warns if no log for a filter
...
Also checks that at least some tests are present
12 years ago
Steven Hiscocks
728399c39e
Merge pull request #281 from kwirk/dovecot-filter
...
ENH: dovecot filter additions for session, time value and blank user
12 years ago
Steven Hiscocks
94376bfbe1
TST: Handle lack of `json` library in python2.5 for samples test case
12 years ago
Steven Hiscocks
40f67c64b8
TST: Test sample logs' entries are matched by filter regexs
12 years ago
Daniel Black
5412d7336f
DOC: ChangeLog confict
12 years ago
Yaroslav Halchenko
5f04b4954f
Merge pull request #280 from yarikoptic/master
...
BF+ENHs: polling backend tracks ino and size now in addition to mtime, filters do not read file unless it has content + few other minor issues
12 years ago
Daniel Black
619603fe05
BF: match asterisk InvalidPassword correctly
12 years ago
Steven Hiscocks
bfa2b9dec3
ENH: dovecot filter additions for session, time value and blank user
12 years ago
Yaroslav Halchenko
47ac39fb34
TST: minor enhancement to test failure msg
12 years ago
Yaroslav Halchenko
052e7ff9da
ENH: deprecate sophisticated MTimeSleep in favor of no sleeping at all
...
all invocations of mtimesleep() are left in the tests for now
12 years ago
Yaroslav Halchenko
8c125b6053
ENH: do not sleep 1 sec only on older Pythons while testing filters
12 years ago
Daniel Black
d6dece4900
ENH: Split log and provide jail examples
12 years ago
Yaroslav Halchenko
e9c8a51ce4
ENH: further tighten up detection of mtimesleep duration + log what was assigned
12 years ago
Yaroslav Halchenko
8f3671bc94
BF: figure out minimal sleep time needed for mtime changes to get detected. Close #223 , and probably #103
12 years ago
Yaroslav Halchenko
e6ebcf6687
Merge branch 'dovecot' of https://github.com/grooverdan/fail2ban
...
* 'dovecot' of https://github.com/grooverdan/fail2ban :
ENH: remove non-capturing groups for readibility
BF: fix dovecot filter for when no TLS is enabled on pop/imap
Conflicts:
ChangeLog -- changelog entries. Also untabified few other spots
12 years ago
Yaroslav Halchenko
f0f237fa05
Merge pull request #269 from grooverdan/asterisk
...
ENH: filter.d/asterisk - consolidate log prefix regex and add a few fail messages
12 years ago
Daniel Black
4777cfd4e7
ENH: split out exim-spam into speparate filter
12 years ago
Yaroslav Halchenko
54cce29b3e
Merge pull request #271 from yarikoptic/master
...
BF: support apache 2.4 more detailed error log format. Close #268
Thanks @grooverdan for the review
12 years ago
Daniel Black
c7d64c3c7f
TST: url reference fix
12 years ago
Daniel Black
ca996ace5e
ENH: remove temporary failures from local_scan in line with comments in gh-258
12 years ago
Daniel Black
72f9e6a51e
ENH/TST: more samples and rejection types for sender verify fail and rejected RCPT
12 years ago
Daniel Black
3b76fc79f9
BF: fix dovecot filter for when no TLS is enabled on pop/imap
12 years ago
Steven Hiscocks
b670b5c792
TST: Change depreciated assertEquals to assertEqual in some tests
12 years ago
Yaroslav Halchenko
1b170b2aef
BF: support apache 2.4 more detailed error log format. Close #268
12 years ago
Yaroslav Halchenko
6d331bcbea
BF: make colon after [daemon] optional. Close #267
12 years ago