314e402fe0
filter.d/sendmail-auth.conf - extended daemon for Fedora 24/RHEL - the daemon name is "sendmail" (gh-1632)
2018-01-10 14:49:06 +01:00
c36fbdf743
test cases extended in order to cover `firewallcmd-ipset` with `allports`
2018-01-10 12:13:07 +01:00
c30144b37a
Merge branch '0.9' into 0.10
...
# Conflicts:
# config/action.d/firewallcmd-ipset.conf
# config/filter.d/asterisk.conf
# Merge-point after cherry-pick, no changes:
# fail2ban/client/jailreader.py
# fail2ban/helpers.py
2018-01-10 12:05:26 +01:00
029cd5aa24
Update ChangeLog
2018-01-10 11:47:59 +01:00
597a27576e
Merge pull request #1908 from GetPageSpeed/firewallcmd-ipset-allports
...
New ban mode `allports` for `firewallcmd-ipset`. Closes #1167
2018-01-10 11:43:44 +01:00
131b94e11e
firewallcmd-ipset-allports: implemented in `action.d/firewallcmd-ipset.conf` now (`action.d/firewallcmd-ipset-allports.conf` removed), usage:
...
banaction = firewallcmd-ipset[actiontype="<allports>"]
2018-01-10 10:58:03 +01:00
c190631f88
New ban action firewallcmd-ipset-allports. Closes #1167
2018-01-10 10:58:01 +01:00
3d9a112c8f
cherry-pick newer version of extractOptions, in order to avoid large discrepancy between 0.10 and 0.9 config-parsers:
...
allow to use dual parameter lists (coming through substitutions), e. g.: `name[p1=0, p2="..."][p3='...']`;
simplified explanation: `][` treats as `,` in new version.
cherry-picked from 0.10.
2018-01-10 10:57:59 +01:00
82f8bd8639
Merge pull request #2011 from Yannik/patch-1
...
Fix filter not catching asterisk requests with quote character in username (fixes #2010 )
2018-01-10 09:27:29 +01:00
f7e2d3610b
Update ChangeLog
2018-01-09 21:19:01 +01:00
a1d1498561
Restore log-entries not affected by #2011
2018-01-09 21:13:02 +01:00
f6d0c86533
test cases extended: flush jail in database
2018-01-09 12:16:37 +01:00
2c69c0e7e5
flush jail in database: bulk remove of all IPs in the database (e. g. reload --unban).
2018-01-09 12:15:56 +01:00
aab54bb0dd
don't replace normal test case with specialized test case
2018-01-08 22:29:43 +01:00
94f0b15c32
Allow faster parsing of hosts without ' characters in them
2018-01-08 14:54:32 +01:00
eaf5e88692
replace actual offenders ip with 1.2.3.4
2018-01-03 19:00:09 +01:00
184202c6aa
remove duplicate testcase
2018-01-03 18:49:38 +01:00
a53ee46ad4
add test for asterisk pjsip attack with quote in username
2018-01-03 18:48:11 +01:00
b28dfb965a
Fix filter not catching asterisk requests with quote character in username ( fixes #2010 )
2018-01-03 18:39:30 +01:00
1e39c2600c
cherry-pick from 0.11: changes in updateDb because it can be executed after repair, and some tables can be missing.
2017-12-22 17:21:11 +01:00
277edd5fe5
amend to pull request #2004 : merge remote-tracking branch 'sebres/auto-repair-database' into 0.10
2017-12-22 16:21:22 +01:00
ab3d03beec
Better variant of repair database: recreate all tables/indices, that can be missing after supposedly successful rescue
2017-12-22 16:13:57 +01:00
75f00a3a6c
Merge pull request #2004 from sebres/auto-repair-database
...
Automatically recover or recreate corrupt persistent database
2017-12-22 14:31:25 +01:00
b104da2800
Merge pull request #2005 from sebres/0.10
...
Stability fix for fail2banclienttestcase, avoid sporadic coverage decrease.
2017-12-22 14:27:20 +01:00
a10d544ddc
coverage: fix another sporadic coverage decrease, if idle mode never reached in some test-cases (e. g. by slowly reloading of jails).
2017-12-22 14:12:19 +01:00
80932af406
coverage: testErrorsInLoop should avoid sporadic coverage changes, if some communication errors not occurred sometimes.
2017-12-22 13:29:35 +01:00
a1fd2c507e
method `waitForServerEnd` renamed into `stopAndWaitForServerEnd` (because will also stop the server)
2017-12-22 13:00:29 +01:00
1ad587ac7c
Stability fix for fail2banclienttestcase:
...
- provide waitForServerEnd method for decorator `with_foreground_server_thread`, to wait for real server stop if needed;
- accept any exit code in decorator `with_foreground_server_thread`, because multi-threaded, thus server can exit in-between;
- fix sporadic fail "AssertionError: 'Banned 5 / 5, 5 ticket(s)' was not found" (if some tickets will be processed earlier,
thus not as chunk but separately), so in case of:
Banned 1 / 1, 1 ticket(s) in 'nginx-blck-lst'
Banned 4 / 5, 5 ticket(s) in 'nginx-blck-lst'
2017-12-22 12:36:01 +01:00
2d23f35d26
Update ChangeLog
...
typo: missing newline restored.
2017-12-21 22:50:54 +01:00
79443210ad
Update ChangeLog
2017-12-21 22:49:57 +01:00
9374de59f3
Automatically recover or recreate corrupt persistent database (e. g. if failed to open with 'database disk image is malformed').
...
Closes #1465
2017-12-21 22:38:54 +01:00
61109d5c4f
Merge pull request #1996 from meke/firewallcmd-new_actioncheck_error
...
firewallcmd-new actioncheck Error
2017-12-09 15:59:40 +01:00
79f414c6a2
fix <family> typo
2017-12-09 15:55:45 +01:00
7c63eb2378
In the CentOS7 and epel environment, result of "firewall-cmd -direct -get -chains ipv4 filter" is displayed one line
...
Changed to be multiple lines with reference to firewallcmd-multiport.conf
2017-12-09 15:55:45 +01:00
95a87077f7
Merge pull request #1995 from sebres/firewallcmd-ipset-flush
...
action.d/firewallcmd-ipset.conf: extended with actionflush to bulk unban resp. flush ipset
2017-12-06 11:43:01 +01:00
bf6667d4da
better (sane) stop server handling, AsyncServer.stop_communication back-ported to 0.10 (cherry-picked from 0.11);
2017-12-06 01:38:39 +01:00
6ccaa03e00
action.d/firewallcmd-ipset.conf: extended with actionflush to bulk unban resp. flush ipset
2017-12-06 01:10:56 +01:00
aa9cefc3f8
proper stop server in the test cases (quit should stop all server-side threads, also if server was not really started);
...
fix-up for run_with_except_hook: avoid very sporadic error "'NoneType' object has no attribute 'exc_info'" (https://bugs.python.org/issue7336 ),
only extremely fast systems are affected ATM (2.x / 3.x), if thread ends nothing is available in .
2017-12-06 01:09:04 +01:00
2712f72650
Merge remote-tracking branch 'master' into 0.10
2017-12-06 00:09:52 +01:00
ad658a0a95
Merge pull request #1989 from sebres/logging-options
...
New server logging options
2017-12-06 00:07:51 +01:00
f96761927d
Merge pull request #1969 from RaidForums/patch-1
...
Update nginx-limit-req filter.
2017-12-05 23:51:18 +01:00
cc9ff31c9c
Update ChangeLog: `action.d/firewallcmd-ipset.conf`: fixed create of set for ipv6 (missing `family inet6`, gh-1990)
2017-12-05 23:35:34 +01:00
e384acca5f
action.d/firewallcmd-ipset.conf: fixed create of set for ipv6 (missing `family inet6`)
2017-12-05 23:34:03 +01:00
6c705d572b
filter.d/nginx-limit-req.conf: nginx limit-req log-level can be set to warn or error therefore having this regex will include both of them.
2017-12-05 22:31:54 +01:00
55143ce1d9
coverage increase
2017-12-05 19:32:13 +01:00
f9833ddee4
Update ChangeLog
2017-12-05 18:55:47 +01:00
1bf6636446
Introduced new parameters for logging within fail2ban-server;
...
Usage `logtarget = target[facility=..., datetime=on|off, format="..."]`:
- `facility` - specify syslog facility (default `daemon`, see https://docs.python.org/2/library/logging.handlers.html#sysloghandler
for the list of facilities);
- `datetime` - add date-time to the message (default on, ignored if `format` specified);
- `format` - specify own format how it will be logged, for example for short-log into STDOUT:
`fail2ban-server -f --logtarget 'stdout[format="%(relativeCreated)5d | %(message)s"]' start`;
Closes gh-1980
2017-12-05 18:54:21 +01:00
de97dedba0
move extractOptions from JailReader to helpers (common usage server- / client-side);
2017-12-05 17:49:22 +01:00
ff987b60cd
Merge pull request #1988 from sebres/exim-aggressive
...
Exim aggressive
2017-12-05 17:30:10 +01:00
b0ba1aa846
Update ChangeLog
2017-12-05 16:24:04 +01:00
sebres