Daniel Black
7c0efc8ec8
MRG: merge so far - flushLogs not working yet
11 years ago
Steven Hiscocks
66e9f06feb
DOC: ChangeLog moved python3 support to refactoring
11 years ago
Steven Hiscocks
401d8aba1f
DOC: Update ChangeLog with systemd backend and persistent database
11 years ago
Daniel Black
f1e593da67
DOC: Changelog for adding firewallcmd-ipset
11 years ago
Daniel Black
f35345ecaa
ENH: add ufw action based off Guilhem Lettron's work in lp-#701522. Closes gh-455
11 years ago
Daniel Black
13ccebe78f
BF: fix actioncheck in firewallcmd
11 years ago
Daniel Black
66374913ec
ENH: add squid filter
11 years ago
Daniel Black
f385439a41
MRG: ChangeLog merge
11 years ago
Daniel Black
80df01bf15
Merge pull request #468 from grooverdan/xarf
...
ENH: action.d/Xarf reporting of messages
11 years ago
Steven Hiscocks
7115f64f83
Merge pull request #470 from grooverdan/flush-logs
...
BF: create flushlogs command to prevent logrotation clobbering logtarget...
11 years ago
Daniel Black
e07ba41870
Merge pull request #463 from grooverdan/firewall-cmd-direct-new-length-too-long
...
BF: firewall-cmd-direct-new was too long. Thanks Joel.
11 years ago
Daniel Black
b5d6310d28
BF: create flushlogs command to prevent logrotation clobbering logtarget. Closes gh-458
11 years ago
Daniel Black
9c1a679b7f
DOC: changelog for xarf-login-attack action
11 years ago
Yaroslav Halchenko
2c1199cce0
Let's progress and mark a2 release toward 0.9.0
11 years ago
Daniel Black
95845b7b65
BF: complain action could match too many IP addresses
11 years ago
Yaroslav Halchenko
3a5983ab0b
Merge branch 'bf/syslog-format' of https://github.com/yarikoptic/fail2ban
...
* 'bf/syslog-format' of https://github.com/yarikoptic/fail2ban :
Changelog entries for the last changes
ENH: added optional [PID] matching in recidive.conf
ENH: reintroducing levelnameinto syslog msgs, time stamp and indentation in non-syslog msgs
BF/ENH: include [PID] into logging msgs, remove indentation from syslog messages
Conflicts:
ChangeLog
11 years ago
Daniel Black
f7504d5b64
MRG: conflict in THANKS
11 years ago
Yaroslav Halchenko
982d5abbef
Merge branch 'namelength20' of https://github.com/grooverdan/fail2ban
...
* 'namelength20' of https://github.com/grooverdan/fail2ban :
DOC: document rational behind 20 character jail name limit
Conflicts:
ChangeLog
11 years ago
Yaroslav Halchenko
25e967f23b
Merge branch 'mysqld-syslog-iptables-name-too-long' of https://github.com/grooverdan/fail2ban
...
* 'mysqld-syslog-iptables-name-too-long' of https://github.com/grooverdan/fail2ban :
BF: jail name mysqld-syslog-iptables too long. removed -iptables. Thanks Stefan (#447 )
Conflicts:
ChangeLog
11 years ago
Daniel Black
b9b2ddf996
BF: smtps not IANA standard. Closes #447
11 years ago
Daniel Black
cade746307
BF: jail name mysqld-syslog-iptables too long. removed -iptables. Thanks Stefan ( #447 )
11 years ago
Daniel Black
af4feb0c92
Actions to have f2b- as prefix instead of fail2ban- as per #462
11 years ago
Daniel Black
fb666b69ff
BF: firewall-cmd-direct-new was too long. Thanks Joel.
11 years ago
Daniel Black
99838440c8
DOC: document rational behind 20 character jail name limit
11 years ago
Daniel Black
227f27ce6b
ENH: added multiline filter for sshd filter
11 years ago
Daniel Black
13223c33f5
MRG: recidive-protocol-all
11 years ago
Yaroslav Halchenko
085ebbe1de
Changelog entries for the last changes
11 years ago
Daniel Black
9a82bc3c61
BF: kernel messages can have space. Thanks ag4ve(shawn). Closes #448
11 years ago
Daniel Black
98eacdf333
MRG/BF: merge from master. Fix bugs in iso8601
11 years ago
Yaroslav Halchenko
629e9ae445
Merge pull request #443 from grooverdan/apache-authfix
...
BF: apache filters using error log weren't matched when referer existed ...
11 years ago
Daniel Black
284f811c91
BF: apache filters using error log weren't matched when referer existed in HTTP header
11 years ago
Yaroslav Halchenko
491165c929
Merge pull request #438 from grooverdan/solid-pop3d
...
ENH: filter for Solid-pop3d
11 years ago
Daniel Black
8aa20a7b0e
ENH: credits for #440 recidive jail protocol=all
11 years ago
Daniel Black
dab2ddb9da
ENH: recidive jail to block all protocols. Closes #440
11 years ago
Yaroslav Halchenko
82174ea4c4
Changelog for preceding proftpd date format change
11 years ago
Daniel Black
88eff70774
ENH: filter.d/solid-pop3d added
11 years ago
Daniel Black
ed212fcdcc
DOC: new ChangeLog header
11 years ago
Daniel Black
1ac7b53cad
MRG: merge from master
11 years ago
Daniel Black
d0498bec69
DOC: finalise 0.8.11 release
11 years ago
Daniel Black
eb9663eb4f
BF/ENH: asterisk connection ID is a hex not decimal number. Add "Rejecting unknown SIP connection from <HOST>" regex thanks to Jonathan Lanning
11 years ago
Yaroslav Halchenko
49024fe6ea
DOC: minor typos in ChangeLog
11 years ago
Yaroslav Halchenko
ea8fce6308
Merge pull request #426 from yarikoptic/bf/openssh6.3-regex-injection
...
openssh 6.3 regex injection vectors: inject into ruser and/or exploiting pre-specified limits set for user provided data
11 years ago
Daniel Black
d6bbe03861
Merge pull request #424 from grooverdan/nginx-auth
...
ENH: add filter.d/nginx-http-auth. Partially forfils #405
11 years ago
Yaroslav Halchenko
750e0c1e3d
BF: disallow exploiting of non-greedy .* in previous fix by providing too long rhost -- do not impose length limits for user-provided input
...
since daemon might eventually change reported length and we would need to adjust anyways. So limiting
in length does not provide additional security but allows for a possible injection vector
11 years ago
Yaroslav Halchenko
eace931c19
Changelog for prior changes (gen_buildbots)
11 years ago
Daniel Black
a148d35d70
ENH: add filter.d/nginx-http-auth. Partially forfills #405
11 years ago
Daniel Black
cb982ef921
ENH: multiline filter for sendmail-spam. Closes gh-418
11 years ago
Yaroslav Halchenko
28ee7ba123
DOC: keeping Changelog release-phrases uniform, simplified intro, unified
11 years ago
Yaroslav Halchenko
f26fba9c19
DOC: Untabifying and reindenting a bit ChangeLog
11 years ago
Daniel Black
0730db9b2b
Merge pull request #416 from grooverdan/debian-bug-665925-wuftpd-pam
...
BF: wuftpd pam filter fix (Debian bug 665925)
11 years ago
Daniel Black
e55b24c533
BF: fix dovecot filter for newer failure message. Closes Debian bug #709324
11 years ago
Daniel Black
8b54523316
BF: fix to filter.d/wuftp to support pam authentication - Debian bug #665925
11 years ago
Daniel Black
ac1f45d18c
Merge pull request #412 from grooverdan/firewalld
...
ENH: enhance firewall-cmd to use firewall-0.8.3's --remove-rules
11 years ago
Daniel Black
87f68d7564
firewalld-0.3.8 release that support --remove-rules out so documenting this.
11 years ago
Daniel Black
47d35c9d80
MRG: 0.8.11 to 0.9
...
Epnoc of selinux is now true UTC
Merge multiline support and date detection in filter
11 years ago
Daniel Black
4ec0e3f087
DOC: version 0.8.11.pre1
11 years ago
Daniel Black
3b2083b06d
DOC: ChangeLog header and merge
11 years ago
Daniel Black
2810f97fe5
DOC: merge ChangeLog
11 years ago
Daniel Black
3a4ba2dba6
DOC: ChangeLog - TODO top summary before final release
11 years ago
Daniel Black
c19a685ee3
DOC: version 0.8.11.pre
11 years ago
Daniel Black
8441539988
DOC: reorder bits of changelog
...
The enhancements list was too long an maybe not always appropriate.
Reclassified changes to filters to catch new versions as bug fixes
since the new version of the application is effectively broken.
Moved large enhancements to New Features.
11 years ago
Daniel Black
c3f9c9aa60
BF: filter.d/dropbear
...
Add PAM failures which is in dropbear-2013.60 in srv-authpam.c
Patch
http://www.unchartedbackwaters.co.uk/files/dropbear/dropbear-0.52.patch
obviously has exit with lower case e so adjust regex for both.
svr-authpasswd.c in 2013.60 (at bottom) for second regex ends after the
IP so the regex was altered.
.*\s* can be compressed to .*
11 years ago
Daniel Black
95f3f38682
MRG: merge ChangeLog and jail.conf
11 years ago
Daniel Black
c7b6d789ca
DOC: add ChangeLog for #392
11 years ago
Daniel Black
e3150044fd
BF: fix selinux
...
TST: ignore *common.conf files in test cases as these are included
BF: Remove USER_LOGIN from selinux-ssh as its a duplicate message
ENH: add sample jail.conf
11 years ago
Daniel Black
d451c2a231
FIX: vsftp improvements from Rich Mellor on mailing list
11 years ago
Daniel Black
88d8111db1
DOC: changelog for selinux-ssh too
11 years ago
Daniel Black
b61fe0f12d
Merge pull request #378 from grooverdan/sasl
...
ENH: filter.d/postfix-sasl - anchor regex at start and rename from filter.d/sasl
11 years ago
Daniel Black
4ecc063bd0
ENH: rename filter.d/sasl -> filter.d/postfix-sasl
11 years ago
Daniel Black
9ca5db7059
DOC: firewalld distro agnostic
11 years ago
Daniel Black
0d8d1ae26c
ENH: new action.d/firewall-cmd-direct-new.conf from Redhat Bugzilla #979622
11 years ago
Daniel Black
123ad1cc9c
MRG: Merge branch 'asterisk-common-jail'
11 years ago
Daniel Black
6ef33981e3
ENH: new asterisk jail to replace asterisk-(tcp|udp) (now that gh-37 is fixed)
11 years ago
Daniel Black
351eb5ec8f
ENH: filter.d/qmail - anchor at start. Add another regex for http://www.tjsi.com/rblsmtpd/faq/ patch to rblsmtpd
11 years ago
Daniel Black
2d1bd54439
Merge pull request #379 from grooverdan/webmin
...
ENH: filter.d/webmin anchor at start and use syslog
11 years ago
Yaroslav Halchenko
500968874e
Merge pull request #381 from grooverdan/suhosin
...
ENH: filter.d/suhosin - anchor regex at start
11 years ago
Yaroslav Halchenko
a7b1b802e0
Merge pull request #382 from grooverdan/vsftpd
...
Vsftpd
11 years ago
Daniel Black
46386412a4
ENH: filter.d/vsftpd - pam regex as syslog and anchored at start
11 years ago
Daniel Black
9637c27873
ENH: filter.d/suhosin - anchor regex at start
11 years ago
Daniel Black
13bcc9aa84
ENH: filter.d/sogo-auth - anchor regex at start
11 years ago
Daniel Black
b64bf3fa7b
ENH: filter.d/webmin anchor at start and use syslog
11 years ago
Daniel Black
f4c7c8f4b3
ENH: sasl - anchor regex at start
11 years ago
Daniel Black
c1d1c181ce
DOC: document time detector changes more thoroughly
11 years ago
Daniel Black
dd10eaa5c0
DOC: improve ChangeLog entry
11 years ago
Daniel Black
caf284d518
DOC: ChangeLog deconflict
11 years ago
Daniel Black
ba8183b116
Merge pull request #372 from grooverdan/uw-imap
...
ENH: filter.d/uwimap-auth added. Closes #18
11 years ago
Daniel Black
a1eaa5f755
ENH: filter.d/selinxu added. Closes #296
11 years ago
Daniel Black
778f09debe
DOC/ENH: __md5hex regex defination to common.conf. Document debian bug #
11 years ago
Daniel Black
b3b62d65bf
ENH: filter.d/uwimap-auth added. Closes #18
11 years ago
Daniel Black
2ad26682a9
DOC: ChangeLog for filter.d/sshd
11 years ago
Daniel Black
e12d389c65
MRG/DOC: jail.conf resolution, ChangeLog fixes
11 years ago
Mark McKinstry
ea112b450b
add ChangeLog and THANKS entry
11 years ago
Daniel Black
4b5ecbccd1
ENH: debuggex URLs with fail2ban-regex
11 years ago
Daniel Black
9805d39b60
MRG: merge date changes to support timezones
11 years ago
Daniel Black
8c2a5612ed
DOC: resolve ChangeLog conflicts
11 years ago
Daniel Black
2a805452c6
DOC: resolve ChangeLog conflicts
11 years ago
Daniel Black
3be7dcd701
DOC: resolve ChangeLog conflicts
11 years ago
Yaroslav Halchenko
596abde712
Merge pull request #352 from grooverdan/recidive
...
ENH: filter.d/recidive - anchor regex at start and support f2b SYSLOG target
11 years ago
Daniel Black
30bb1a77a3
ENH: added syslog prefix to pam-generic filter. Disable regex match for pre 2006 (< 0.99.2.0) versions on linux-pam
11 years ago
Daniel Black
ee497ff1cb
ENH: filter mysqld-auth can be a is a syslog based service so anchor it using syslog prefix
11 years ago