Commit Graph

5798 Commits (226a59445a8046b7f86c3bc072be1d78555ccdb0)

Author SHA1 Message Date
sebres 226a59445a merge branch gh-2690--mig2to3 : fail2ban is python 3.x based now;
closes gh-2690
2023-06-16 17:02:27 +02:00
sebres 9c5f6eea76 version bump (master / 1.1 is python 3.x based now) 2023-06-16 16:59:22 +02:00
sebres 99ff701678 remove support of python 2.x 2023-06-16 16:29:08 +02:00
sebres 03d7c92ae8 2to3 2023-06-16 15:23:41 +02:00
sebres e2c4982417 Merge branch 'fix-gh-3485', `filter.d/sshd.conf`:
- avoid double counting for "maximum authentication attempts exceeded" (gh-3502)
  - message "Disconnecting ... Too many authentication failures" is not a failure anymore
2023-06-13 18:58:47 +02:00
sebres 101d6923e3 ChangeLog (gh-3485) 2023-06-13 18:57:05 +02:00
sebres eebef0089c avoid double counting for "maximum authentication attempts exceeded" ("Disconnecting ..." is no failure anymore, now it's helper only);
closes gh-3485
2023-06-13 18:49:26 +02:00
Sergey G. Brester 66e195b0f3
jail.conf: comment only (time abbr format), no function changes
closes gh-3522
2023-06-10 14:15:52 +02:00
Sergey G. Brester 8e97474586
Merge pull request #3517 from seaniedan/patch-1
Update README.md: added reference to wiki/How-to-install-fail2ban-packages
2023-06-01 16:58:58 +02:00
Sean Danischevsky 5cd4c5a29f
Update README.md
added link to wiki page install instructions
2023-06-01 09:47:53 +01:00
Sean Danischevsky 217f404b22
Update README.md
add install instructions for popular linux distributions
2023-05-31 23:13:48 +01:00
Sergey G. Brester fb8a93b40f
Merge pull request #3514 from ulm/gentoo-url
Update URLs for Gentoo
2023-05-27 13:15:00 +02:00
Ulrich Müller 50cbc7e8dd
Update URLs for Gentoo
Gentoo moved from CVS to Git in 2015.

Drop the Gentoo URL from fail2ban-logrotate, because the distro
specific config file has been dropped in 2013.
2023-05-21 10:47:52 +02:00
Sergey G. Brester 5d9603c104
failregex.py: resolve deprecation warning for sre_constants
closes gh-3508
2023-05-03 12:00:24 +02:00
Sergey G. Brester baf8330214
GHA: update python-versions, 3.11 is released 2023-05-03 11:55:00 +02:00
sebres ca4af85cd7 avoid confusion of path as failure ID with IP/CIDR notation, improve IP/CIDR parsing;
wrong CIDR notation or invalid plen always causes a fallback to raw string now;
fixes recognition of `::` and `::/32`
2023-04-26 17:10:39 +02:00
Sergey G. Brester de0ed85fb8
README.md: code status - switch from travis-ci to GHA 2023-04-24 23:10:47 +02:00
Sergey G. Brester 871101c3c1
Merge pull request #3502 from fail2ban/gh-3497
filter.d/exim.conf: fixes "dropped: too many ..." regex (also matches unrecognized commands)
2023-04-24 22:59:00 +02:00
Sergey G. Brester 3c8d5fd4ef
Update ChangeLog 2023-04-24 17:11:04 +02:00
Sergey G. Brester 809b904106
filter.d/exim.conf: fixes "dropped: too many ..." regex and also matches unrecognized commands new vector 2023-04-24 15:40:53 +02:00
Sergey G. Brester 7544e969d5
new test messages for exim (gh-3497) 2023-04-24 15:36:21 +02:00
Sergey G. Brester 2b98f461bb
Merge pull request #2860 from a16bitsysop/mikrotik
Add action for mikrotik routerOS
2023-04-13 19:10:30 +02:00
Sergey G. Brester e73748c442
Merge branch 'master' into mikrotik 2023-04-13 19:09:00 +02:00
Sergey G. Brester 27294c4b9e
fail2banregextestcase: compatibility fix for testWrongRE 2023-04-04 13:30:12 +02:00
sebres 56485c8548 filtertestcase.py: byte related copy of lines in tests (locale independent); closes gh-2936 2023-04-04 12:48:12 +02:00
Sergey G. Brester a9b30eb86e
Merge pull request #2226 from mbologna/nginx-forbidden
Feat: ban nginx forbidden accesses
2023-03-23 12:33:32 +01:00
Sergey G. Brester 9cbf59c827
anchored datepattern and added journalmatch (if monitoring systemd journal) 2023-03-23 12:16:13 +01:00
Sergey G. Brester 212a4c236a
update changeLog, nginx-forbidden, gh-2226 2023-03-23 12:12:55 +01:00
Sergey G. Brester 2c0360d178
Merge branch 'master' into nginx-forbidden 2023-03-23 12:01:50 +01:00
sebres d1d1730de0 Merge fix #3479:
action.d/cloudflare-token.conf: url-encode args by unban
closes 'gh-3479'
2023-03-15 15:14:43 +01:00
Sergey G. Brester 3d4bed50c2
changelog entry (gh-3479) 2023-03-15 15:08:45 +01:00
Sergey G. Brester c7f8b75e7e
action.d/cloudflare-token.conf: fixes #3479, url-encode args by unban 2023-03-15 15:03:48 +01:00
Duncan Bellamy 7dc32971f8 changed missed names 2023-03-08 12:16:35 +00:00
Duncan Bellamy 9b1417a169 apply suggestions 2023-03-08 09:29:03 +00:00
Duncan Bellamy b892133d51 move new comment in changelog 2023-03-08 09:20:51 +00:00
Sergey G. Brester d46ec3a555 add jail boundary to flush command for more precise targeting of jail (if some name may be equal to prefix of other name) 2023-03-08 09:17:13 +00:00
Duncan Bellamy 5781675a7d change startcomment and comment so correct rules are flushed 2023-03-08 09:17:13 +00:00
Duncan Bellamy ac2076ef4f change unban back to find comment so correct entry always deleted 2023-03-08 09:17:13 +00:00
Duncan Bellamy 0e3e9b1d7f Add flushaction
Change unban to find by ip address not comment
2023-03-08 09:17:13 +00:00
Duncan Bellamy 9997807fb3 Add action for mikrotik routerOS 2023-03-08 09:17:13 +00:00
Sergey G. Brester 234660e94d
CI-workflow: remove 3.5 (seems to have a bug in GHA now) 2023-02-28 11:39:00 +01:00
Sergey G. Brester 17f060526e
readme: amend 2023-02-28 11:36:34 +01:00
Sergey G. Brester 92fae68071
readme: update version 2023-02-28 11:32:28 +01:00
Sergey G. Brester 06e3dea062
Merge pull request #3460 from Trotyl84/patch-1
.gitignore: ignore `.venv/`
2023-02-20 08:42:53 +01:00
Łukasz Turon 5dcbc0dd55
Update .gitignore
Please add this entry for virtual python interpreter. This directory name is needed in the PyCharm environment.
2023-02-18 23:49:28 +01:00
sebres f93a538693 gh-3447: fix careless mistake arisen in b12a3acb06 by attempt to implement new reload capacity (rewritten latter): causing error "'noduplicates' is not defined" by double jail configuration 2023-01-17 12:53:39 +01:00
sebres a3a3fffa54 Merge branch 'fix-gh-3438':
* circumvent SEGFAULT in a python's socket module by getaddrinfo with disabled IPv6 (gh-3438)
* improve auto-detection of IPv6 support (`allowipv6 = auto` by default)
* improve `ignoreself` by considering all local addresses from network interfaces additionally to IPs from hostnames (gh-3132)
2023-01-11 18:41:15 +01:00
sebres ed135b6a93 changelog entries (gh-3438, gh-3132) 2023-01-11 18:30:37 +01:00
sebres 582436aadf don't add subnets to local addresses of `ignoreself` from network interfaces, use only IPs instead (subnets may be too heavy and not wanted, todo: make it configurable later) 2023-01-11 18:27:44 +01:00
sebres cb8674e68a amend with few improvements, IPv6IsAllowed prefers IPs from network interfaces (if available for platform) and uses DNS (socket.getaddrinfo) as a fallback only 2023-01-10 12:20:48 +01:00