Yaroslav Halchenko
b8a861d012
Merge remote-tracking branch 'gh-yarikoptic/master'
...
* gh-yarikoptic/master:
ENH: Added login authenticator failed regexp for exim filter
DOC: Mention that logrotate configuration needs to be adjusted if logtarget is changed (Closes : #697333 )
12 years ago
Yaroslav Halchenko
4a48844027
Merge pull request #107 from opoplawski/master
...
sshd filter - avoid banning on pam failures since might be too early. Close gh-106
If desired to ban on pam -- enable pam-generic filter, possibly even tuning in pam-generic.local the value for caught ttys in case of more detailed control needed
Provided example was:
Jan 18 12:47:34 host sshd[23755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.123.123.123 user=myuser
Jan 18 12:47:34 host sshd[23755]: pam_sss(sshd:auth): authentication success; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.123.123.123 user=myuser
Jan 18 12:47:34 host sshd[23755]: Accepted password for myuser from 123.123.123.123 port 50615 ssh2
12 years ago
Yaroslav Halchenko
7d630cb0de
Merge pull request #109 from blotus/master
...
Escape ' and " in matches
12 years ago
blotus
96eb8986cc
Escape ' and " in matches tag
12 years ago
Orion Poplawski
bb7628591c
Update config/filter.d/sshd.conf
...
Do not trigger sshd bans on pam_unix authentication failures, this will trigger on successful logins on systems that use non-pam_unix authentication (sssd, ldap, etc.).
12 years ago
Yaroslav Halchenko
9a39292813
ENH: Added login authenticator failed regexp for exim filter
12 years ago
Yaroslav Halchenko
b3d8ba146b
DOC: Mention that logrotate configuration needs to be adjusted if logtarget is changed ( Closes : #697333 )
12 years ago
Yaroslav Halchenko
3ce53e8798
ENH: Added login authenticator failed regexp for exim filter
12 years ago
Yaroslav Halchenko
8f0c533d64
DOC: Mention that logrotate configuration needs to be adjusted if logtarget is changed ( Closes : #697333 )
12 years ago
Michael Gebetsroither
03433f79cd
add example jail.conf for blocking through blackhole routes for ssh
12 years ago
Michael Gebetsroither
f9b78ba927
add support for blocking through blackhole routes
12 years ago
Yaroslav Halchenko
be06b1b914
Merge pull request #102 from grooverdan/ipset
...
Ipset
12 years ago
Daniel Black
da0ba8ab4c
ENH: add example jail for ipset
12 years ago
Daniel Black
9221886df6
more documentation and optimisations/fixes based on testing
12 years ago
Daniel Black
abd5984234
base ipset support
12 years ago
Yaroslav Halchenko
05af52e833
ENH: fail2ban-regex -- __str__ for RegexStat + modeline
12 years ago
Yaroslav Halchenko
21e966e4bb
example logs should carry the same name as the filter they are devised for
12 years ago
Yaroslav Halchenko
f96ea013bb
Merge pull request #99 from pigsyn/patch-2
...
Update config/filter.d/webmin-auth.conf for trailing spaces
12 years ago
pigsyn
123d457924
Update testcases/files/logs/Webmin
12 years ago
pigsyn
38dd1506cc
Sample Webmin logs
12 years ago
pigsyn
f336d9f876
Update config/filter.d/webmin-auth.conf
...
Added '\s*$' to the regular expression to match the space written by webmin logs at line-endings
12 years ago
pigsyn
dc67b24270
Update config/filter.d/webmin-auth.conf
...
Added a trailing '.*$' to each regex so they can find expressions in targeted log files.
12 years ago
Yaroslav Halchenko
3969e3f77b
ENH: dovecot.conf - require space(s) before rip/rhost log entry
12 years ago
Yaroslav Halchenko
68c1defb76
ENH: added dovecot example from Daniel Black + example with DoS attempt via injected rhost
12 years ago
Yaroslav Halchenko
6d804df504
Merge branch 'patch-2' of https://github.com/hamilton5/fail2ban (dovecot log examples)
...
* 'patch-2' of https://github.com/hamilton5/fail2ban :
Update testcases/files/logs/dovecot
Update testcases/files/logs/dovecot
12 years ago
Yaroslav Halchenko
d7b7d7d491
Merge branch 'patch-1' of https://github.com/hamilton5/fail2ban
...
* 'patch-1' of https://github.com/hamilton5/fail2ban :
Update config/filter.d/dovecot.conf
Update config/filter.d/dovecot.conf
Update config/filter.d/dovecot.conf
12 years ago
Yaroslav Halchenko
46e2de98ff
Merge pull request #97 from grooverdan/simplefix
...
name -> IP is a normal DNS lookup not a reverse
12 years ago
Yaroslav Halchenko
620d6015ac
Merge pull request #98 from grooverdan/gitignore
...
ignore build directory and compiled python bits
12 years ago
Daniel Black
fd7929863b
name -> IP is a normal DNS lookup not a reverse
12 years ago
Daniel Black
b95dc592b9
ignore build directory and compiled python bits
12 years ago
hamilton5
266cdc29a6
Update config/filter.d/dovecot.conf
...
even tho not on the fail2ban site..
suggested to not be greedy by yarikoptic
12 years ago
hamilton5
ccc62ddbf3
Update testcases/files/logs/dovecot
12 years ago
Yaroslav Halchenko
67145d8b78
ENH: assure that all date templates have unique names
12 years ago
Yaroslav Halchenko
d1625253eb
ENH: debug msgs on which template was taken (+ use "is" for None comparisons)
12 years ago
Yaroslav Halchenko
2b6366656f
BF: make sorting of date templates stable
...
Before, it would first do stable sort followed with explicit reverse.
Now reverse is given as an argument to sort, and it results in actually
preserving the order in case of e.g. no sorting needed
12 years ago
Yaroslav Halchenko
7bd977e2df
ENH: fail2ban-testscases -- allow to specify regexps for tests to be ran
...
Eventually we will switch to use nose or py.test -- for now this
homebrew solution could be used to run selected suites only
12 years ago
hamilton5
c534c1d03d
Update testcases/files/logs/dovecot
12 years ago
hamilton5
e040c6d8a3
Update config/filter.d/dovecot.conf
...
site actually needs updated because of <HOST> alias
per Notes above.
12 years ago
hamilton5
7ede1e8518
Update config/filter.d/dovecot.conf
...
added failregex line for debian and centos per
http://www.fail2ban.org/wiki/index.php/Talk:Dovecot
12 years ago
Yaroslav Halchenko
fc27e00290
ENH: tune up sshd-ddos to use common.conf and allow training spaces
12 years ago
Yaroslav Halchenko
51a3be2d79
Getting ready for 0.8.8 release (changelog, version boost)
12 years ago
Yaroslav Halchenko
37a2e59d69
BF: guarantee that IP is stored as a base, non-unicode str (Closes gh-91)
...
Otherwise it might lead to spurious characters dumped into the
terminal at few places, unless casted upon every use in the logs. To
prevent those issues in the source, store IP as a basic string if it
is a string at all
12 years ago
Yaroslav Halchenko
03b31398aa
ENH: BF (forgotten import) for prev commit + removed duplicate Author, adjusted __ fields for that in fail2ban-* scripts
12 years ago
Yaroslav Halchenko
9e7a3b7a04
ENH: until we make it proper module -- adjust sys.path only if system-wide run
12 years ago
Yaroslav Halchenko
348239cf14
ENH: fail2ban-testcases-all -- pass cmdline options to fail2ban-testcases
12 years ago
Yaroslav Halchenko
f10537941b
ENH: To help with gh-87 added hints into the log on some failure return codes (e.g. 0x7f00 for this one)
12 years ago
Yaroslav Halchenko
efc4fd5f0b
ENH: trying to go native travis-ci python way to take advantage of virtualenv's with older pythons
12 years ago
Yaroslav Halchenko
29aef9381a
BF: typo
12 years ago
Yaroslav Halchenko
39172a99c5
BF: added a little shell script to excercise tests against all available Python versions
...
also report Python version inside fail2ban-testcases
12 years ago
Yaroslav Halchenko
ef2ea965c8
ENH: travis -- try to run tests against all available python versions
12 years ago