Commit Graph

423 Commits (267cbf5861edbf7a2e944d9ed1334baa7a373b10)

Author SHA1 Message Date
Andrew St. Jean 43732acae1 Added a reminder to create an nsupdate.local file to set required options.
10 years ago
Yaroslav Halchenko 085d0f72ed ENH: use non-UTC date invocation (without -u) and report offset for localzone (%z)
10 years ago
rumple010 eb76dcd5a0 add nsupdate action
10 years ago
Yaroslav Halchenko 083031524d BF: adding missing Definition section header to firewallcmd-allports
10 years ago
TorontoMedia d7b7f4bc91 Update firewallcmd-allports.conf
10 years ago
TorontoMedia 7eed55266b Created firewallcmd-multiport
10 years ago
TorontoMedia 9f91cb2fd8 Created firewallcmd-allports
10 years ago
TorontoMedia 50e5fd9ed7 Create firewallcmd-multiport.conf
10 years ago
TorontoMedia 591e444753 Create firewallcmd-allports.conf
10 years ago
Yaroslav Halchenko 967485c2d0 improving grepping
10 years ago
Yaroslav Halchenko efbf5064a1 Merge pull request #807 from xslidian/patch-1
10 years ago
Orion Poplawski 01b2673e34 Use multiport for firewallcmd-new
10 years ago
Dean Lee ba44ff312b grep IP at the start of lines
10 years ago
Yaroslav Halchenko 0d9cfb84e3 Merge pull request #778 from yarikoptic/enh/symbiosis
10 years ago
Yaroslav Halchenko 93243e7d57 ENH: Ignore errors while unbaning in symbiosis firewall
10 years ago
Yaroslav Halchenko 818dd59d65 ENH: symbiosis-blacklist-allports action
10 years ago
Markus Amalthea Magnuson 7b76322898 Fix typos.
10 years ago
leftyfb 6dbd449f77 Changed to Cloudflare JSON API
10 years ago
leftyfb cba570cabd Updated comments
11 years ago
leftyfb 5471e99ebe Added cloudflare action
11 years ago
Yaroslav Halchenko 0adb10f653 Merge branch 'ainfo-copy' of https://github.com/kwirk/fail2ban
11 years ago
SATO Kentaro 65ff3e9604 ENH: Introduce iptables-common.conf.
11 years ago
Steven Hiscocks 8268c1641f BF: aInfo could be modified by actions, causing unexpected behaviour
11 years ago
SATO Kentaro 1e1c4ac62a ENH: Add <chain> to iptables-ipsets.
11 years ago
Steven Hiscocks db023be09b BF: Fix bad syntax in badips.py action
11 years ago
Yaroslav Halchenko 596b819bdc DOC: minor -- tabify docstring in badips.py action
11 years ago
Steven Hiscocks 9fcb92524e BF: badips.py action logging of exc_info on debug typo
11 years ago
yungchin 3a155ed2e0 Update comments in shorewall.conf for new settings
11 years ago
Ruben Kerkhof 1c36da9df9 Fix 2 more typos that codespell didn't catch
11 years ago
Ruben Kerkhof 1695d5c076 Fix a few typos
11 years ago
Steven Hiscocks 41cbbbc248 BF: Remove unused imports and variables.
11 years ago
Steven Hiscocks 16125ec81a BF: badips.py action methods not static due to use of self._logSys
11 years ago
Steven Hiscocks 9e374b159e ENH: Allow setting of badips.py key for reporting and blacklisting
11 years ago
Steven Hiscocks de43d1d6d5 ENH: Change badips.py default score to "3"
11 years ago
Steven Hiscocks 0222ff4677 Merge branch 'badips-blacklist' into 0.9
11 years ago
Steven Hiscocks 0c63d0061a DOC: Add documentation for badips.py action
11 years ago
Steven Hiscocks dfb46cfda6 BF: Require Python 2.7+ for badips.py action
11 years ago
Daniel Black cc8ec826c5 MRG: from master 2014-03-02
11 years ago
Steven Hiscocks df8d700d17 RF: Refactor Jail and JailThread
11 years ago
Daniel Black 9be22a96a6 Merge pull request #614 from kwirk/complain-abusix
11 years ago
Daniel Black cc463aa60d Merge pull request #620 from kwirk/xarf-tweaks
11 years ago
Daniel Black a044517cb7 MRG: from master to 0.9 2014-02-20
11 years ago
Steven Hiscocks 8c5525163b BF: Fix misplaced ";", and duplicate {ip,}matches
11 years ago
Steven Hiscocks 997729e274 BF: Fix complain action for multiple recipients and misplaced ";"
11 years ago
Steven Hiscocks 7c76f7f204 BF: $EUID not avilable in all shells, replaced with `id -u` in xt_recent
11 years ago
Steven Hiscocks 2a37ee2fb7 ENH: Add root user check in xt_recent, and add missing actionstop
11 years ago
Steven Hiscocks 5c7630c4be ENH: Allow separate blacklist category for badips.py action
11 years ago
Steven Hiscocks cf81ddd8e2 BF: Add error handling in badips.py action
11 years ago
Steven Hiscocks 31f4ea59cb BF: Use abusix Abuse Contact DB to get more accurate abuse addresses
11 years ago
Steven Hiscocks dff8909473 ENH: Add badips.com reporting and blacklisting action (python based)
11 years ago
Daniel Black 1e1261ccb4 MRG: from master 2014-01-23
11 years ago
Daniel Black ca57427080 BF: firewallcmd-ipset had non-working actioncheck
11 years ago
Steven Hiscocks 8221c7ca71 TST+BF: Add tests for python actions, including test for smtp.py
11 years ago
Daniel Black a650178bd1 MRG: merge from master 2014-01-19
11 years ago
Daniel Black f566cab766 Merge branch 'master' into badips
11 years ago
Daniel Black cd3e94140c MRG: complete merge
11 years ago
Yaroslav Halchenko 9a8b449086 DOC: some typos, fixes from Vincent Lefevre
11 years ago
Daniel Black 76468942f9 MRG: complete merge from master
11 years ago
Daniel Black ab3ded2205 Merge pull request #549 from kwirk/python-actions
11 years ago
Steven Hiscocks 69a850d226 DOC: Update docstrings for smtp.py action
11 years ago
Steven Hiscocks 6e63f0ea5a RF: Change Jails and Actions to Mapping types
11 years ago
Daniel Black 3d1a1afca4 MRG: to more recent 0.9
11 years ago
Daniel Black 5fe75436cc DOC: DEV NOTES before author names
11 years ago
Steven Hiscocks 80d6f74ee8 RF: Refactor actions further, include removing server proxy interface
11 years ago
Daniel Black a0c2de3e4d DOC: document incompatiblity between APF and iptables-* actions. Closes gh-510
11 years ago
Steven Hiscocks 98bf511443 BF: Incorrect number of arguments in smtp.py action connect log
11 years ago
Steven Hiscocks 5b2b59d752 ENH: python actions use initOpts as **kwargs
11 years ago
Steven Hiscocks 6ef911185d ENH: Add matches to smtp.py action
11 years ago
Daniel Black 391b5fc883 MRG: from master again 2014-01-01
11 years ago
Steven Hiscocks f37c90cdba ENH: Python based actions
11 years ago
Daniel Black be382dae4d MRG: ufw changelog conflicts
11 years ago
Daniel Black 1f6ece2a40 Merge pull request #490 from grooverdan/firewallcmd-ipset
11 years ago
Daniel Black a1a219189f Merge pull request #493 from grooverdan/xarf-ipmatch
11 years ago
Daniel Black 7c0efc8ec8 MRG: merge so far - flushLogs not working yet
11 years ago
Daniel Black 4eedf9d4e1 ENH: use ipmatches for action xarf-login-attack
11 years ago
Daniel Black a398c51d6c ENH: simplify actioncheck on firewallcmd-new a little more
11 years ago
Daniel Black 772def1095 Merge pull request #491 from kwirk/ipmatches
11 years ago
Steven Hiscocks 40007abc1d ENH: Refactor and add database matches and failures for sendmail actions
11 years ago
Daniel Black 1c6c011154 EHH missed trailing .
11 years ago
Daniel Black 868a4ea470 ENH: full abusix disclaimer in action xarf-login-attack
11 years ago
Daniel Black 9fe0a69852 ENH: add firewallcmd-ipset
11 years ago
Daniel Black 4ffc57e14f ENH: simplify firewallcmd-new actioncheck and provide output samples
11 years ago
Daniel Black ed816afbcd ENH: add badips action
11 years ago
Daniel Black 1ff52dfe4d DOC: document ufw a bit more. Change insertpos default to 1 to allow it to work if the user run ufw enable
11 years ago
Daniel Black f35345ecaa ENH: add ufw action based off Guilhem Lettron's work in lp-#701522. Closes gh-455
11 years ago
Daniel Black 13ccebe78f BF: fix actioncheck in firewallcmd
11 years ago
Steven Hiscocks 0bcff771b8 ENH: Add <ipmatches> and <ipjailmatches> tags
11 years ago
Daniel Black f385439a41 MRG: ChangeLog merge
11 years ago
Daniel Black 36917d7517 BF: action.d/complain - match IP at beginning and end of lines
11 years ago
Daniel Black 135c759dbb Merge pull request #477 from kwirk/blocklist.de
11 years ago
Steven Hiscocks 630dd91dcd BF: Add [Init] section to blocklist.de action
11 years ago
Steven Hiscocks b3c173795e ENH: blocklist.de action error on HTTP response code 4xx
11 years ago
Daniel Black 51f2619878 Merge pull request #473 from grooverdan/whois-missing
11 years ago
Steven Hiscocks a19b33cc72 ENH: blocklist.de action added fail2ban version as user agent
11 years ago
Steven Hiscocks f742ed0e4b DOC: when to use blocklist.de reporting
11 years ago
Steven Hiscocks e810ec009d ENH: Added blocklist.de reporting API action
11 years ago
Daniel Black 4dc51e5def BF: put notice in email if whois program could not provide more information. Closes gh-471
11 years ago
Daniel Black 97d7f46bb7 DOC: correct grammar - s/Here are more information/Here is more information/
11 years ago
Daniel Black 8aead9ab79 BF: escape quotes when splitting addresses for xarf
11 years ago
Daniel Black 1846056606 DOC: when to use xarf messages to network owner
11 years ago
Daniel Black 8c37d2e4de ENH: remove dependency on querycontacts
11 years ago
Daniel Black dd356c3cef BF: fixed for sendmail and tested the MTA aspects of this action
11 years ago
Daniel Black 9df5f4eec8 BF: remove debugging tee command on xarf-login-attack
11 years ago
Daniel Black d015f7f4fc BF/ENH: fixed so xarf-login-attack works
11 years ago
Daniel Black 0495aa098e BF: grep matches on <ip> shouldn't include other IPs
11 years ago
Daniel Black 95845b7b65 BF: complain action could match too many IP addresses
11 years ago
Daniel Black 5cc7173fd4 ENH: add xarf email sender for login-attack type
11 years ago
Daniel Black 56b6bf7d25 ENH: reduce firewalld-cmd-new -> firewallcmd-new
11 years ago
Daniel Black 86a0a5962a BF: revert to fail2ban- prefix as f2b- was intended for 0.9
11 years ago
Daniel Black 9e53892708 BF: did remove instead of move
11 years ago
Daniel Black af4feb0c92 Actions to have f2b- as prefix instead of fail2ban- as per #462
11 years ago
Daniel Black fb666b69ff BF: firewall-cmd-direct-new was too long. Thanks Joel.
11 years ago
Daniel Black dc154c792e BF: add init section with name for action.d/apf. Closes #398
11 years ago
Daniel Black 87f68d7564 firewalld-0.3.8 release that support --remove-rules out so documenting this.
11 years ago
Daniel Black 5eddd5d12d DOC: document required firewalld version as > 0.3.7.1
11 years ago
Daniel Black 8ac6081555 ENH: fix to use upstream --remove-rules
11 years ago
Daniel Black c2b76d1fd0 Merge pull request #397 from yarikoptic/_enh/unify_default_strings
11 years ago
Daniel Black b4cbf82912 DOC: remove Default: on action firewall-cmd-direct-new
11 years ago
Yaroslav Halchenko 4149c7495d Options in actions to be specified in jails have no "Default"s besides those specified in the files -- thus removing from comments
11 years ago
Daniel Black f1bb08aa6a ENH: base blocktype off iptables-blocktype.conf for firewall-cmd-direct-new.conf like other iptables based actions
11 years ago
Daniel Black 12f7ea7ec4 DOC: remove excessive comments from firewall-cmd-direct-new
11 years ago
Daniel Black 0d8d1ae26c ENH: new action.d/firewall-cmd-direct-new.conf from Redhat Bugzilla #979622
11 years ago
Daniel Black 1a5e17f2a3 BF: use blocktype for iptables-ipset-proto6*
11 years ago
Daniel Black dcb845f17c ENH: add iptables-ipset-proto6-allports for blocking all ports
11 years ago
Daniel Black e12d389c65 MRG/DOC: jail.conf resolution, ChangeLog fixes
11 years ago
Mark McKinstry b6bf26c9f2 dont' need to set a default name
11 years ago
Mark McKinstry 2668adc896 Merge branch 'master' of github.com:fail2ban/fail2ban
11 years ago
Mark McKinstry 1af4543aca ability to name the jail that banned the IP with apf
11 years ago
Mark McKinstry dd9ee4c39a quotes around the comment put in apf's deny_hosts.rules file
11 years ago
Mark McKinstry e64493c328 use human readable/longer options when banning and un-banning IPs with apf
11 years ago
Mark McKinstry c692912a82 don't hardcode absolute path for apf firewall
11 years ago
Mark McKinstry 66aff43d68 remove un-needed '$' line
11 years ago
Beau Raines 060bd45295 ENH - Added server name to subject line in email notifications
11 years ago
Daniel Black ad291d7e38 Merge pull request #346 from grooverdan/bsd-ipfw-default-unreach-port
11 years ago
Daniel Black 4face1f3e7 MRG: resolve conficts in action.d/osx-ipfw design
11 years ago
Andy Fragen d258a51a23 after some research it looks like setting to unreachable better than deny
11 years ago
Andy Fragen fe557e5900 more specific actionunban
11 years ago
Andy Fragen a4884f82cd add mods from grooverdan and fix actionunban
11 years ago
Daniel Black f2bcf84893 BF: action.d/bsd-ipfw - use blocktype instead of unused action for icmp rejecting blocked packets
11 years ago
Daniel Black 749f215089 ENH: port optional
11 years ago
Daniel Black 8b22fa15b5 BF: reverted to simplier random rulenum. If your machine is handling 1000s of block the addition complexity isnt what you want
11 years ago
Daniel Black b31799a322 ENH: add action.d/osx-afctl anonymously contributed on f2b wiki
11 years ago
Daniel Black 5741348f45 ENH: more options and ruggedness to prevent unintensional consequences
11 years ago
Daniel Black 52bd0f86a8 Merge branch 'osx-ipfw' of https://github.com/afragen/fail2ban into osx
11 years ago
Daniel Black 7cc3e8a8c0 BF: Invert expression on actionstop in bsd-ipfw.conf to ensure exit status 0 on success. Closes gh-343
11 years ago
Andy Fragen ef504c869f added osx specific ipfw action with random rulenum
11 years ago
Daniel Black 6a36ff1a4a BF: order mailx arguments with dest email address last - redhat bugzilla 998020. Closes gh-328
11 years ago
Orion Poplawski 31a78b2711 Use /var/run/fail2ban in config/action.d/dummy.conf
11 years ago
Daniel Black ab10664b57 ENH: action.d/hostsdeny to take daemon_list arguement as suggested in README.Solaris
12 years ago
Daniel Black 1d6d5a7aae DOC: ChangeLog merge confict
12 years ago
Alexander Dietrich da594075f3 Move sendmail settings to common file, make sender name configurable
12 years ago
Daniel Black aebd24ec54 BF: replace with ed so its cross platform, fixes permission problem gh-266, and Yaroslav doesn't revert to perl
12 years ago
Yaroslav Halchenko 89e06bba15 BF: blocktype must be defined within [Init] -- adding [Init] section. Close #232
12 years ago
Yaroslav Halchenko 5accc10a47 Merge pull request #206 from grooverdan/bsd_ipfw
12 years ago
Yaroslav Halchenko 0ae49ab11e Merge branch 'bsd_pf' of https://github.com/grooverdan/fail2ban
12 years ago
Yaroslav Halchenko e85914cef8 Merge pull request #215 from grooverdan/reject_no_drop_by_default
12 years ago
Daniel Black 9c03ee6d9e ENH: consolidate where blocktype is defined for iptables rules
12 years ago
Daniel Black c7fd777966 BF: default type to unreachable
12 years ago
Yaroslav Halchenko 2143cdff39 Merge: opensolaris docs/fixes, no 'sed -i' in hostsdeny, sshd regex tuneups
12 years ago
Daniel Black 3b4a7b7926 ENH: add blocktype to all relevant actions. Also default the rejection to a ICMP reject rather than a drop
12 years ago
Daniel Black 0c5a9c53e1 ENH: pf action thanks to Nick Hilliard <nick@foobar.org>.
12 years ago
Daniel Black b6d0e8ad9c ENH: add ipfw rule for bsd using the tables.
12 years ago
Daniel Black 495f2dd877 DOC: purge of svn tags
12 years ago
jamesstout b7795addd0 ENH: actionunban back to a sed command
12 years ago
Daniel Black 945ad3d9e6 BF: ensure dates in email are in the C locale. Thanks iGeorgeX
12 years ago
jamesstout de98e3dabd change sed to perl for Solaris
12 years ago
Daniel Black 67544d1dd6 DOC: tags are documented in the jail.conf(5) man page
12 years ago
Yaroslav Halchenko 5e5eaaf838 Merge pull request #134 from grooverdan/misc-fixes
12 years ago
Pascal Borreli a2b29b4875 Fixed typos
12 years ago
Daniel Black a0f088be25 ENH: typo + head -1 has been deprecated for 10+ years.
12 years ago
Yaroslav Halchenko d5ae28facf Merge pull request #104 from gebi/t/route
12 years ago
Daniel Black 47b1ee39d8 add blocking type
12 years ago
Yaroslav Halchenko 8cf006827e BF: remove path from grep call in sendmail-whois-lines.conf Closes: gh-118
12 years ago
Michael Gebetsroither f9b78ba927 add support for blocking through blackhole routes
12 years ago
Daniel Black 9221886df6 more documentation and optimisations/fixes based on testing
12 years ago
Daniel Black abd5984234 base ipset support
12 years ago
Mark McKinstry 95de9c1a97 add support for the APF firewall
12 years ago
Yaroslav Halchenko 2a225aa6ee Added a warning within "complaint.conf" action about care with enabling it
12 years ago
Yaroslav Halchenko 80b191c7fd BF: anchor chain name in actioncheck's for iptables actions (Closes: #672228)
13 years ago
Yaroslav Halchenko 35201f6690 Merge remote-tracking branch 'gh-keszybz/master'
13 years ago
Zbigniew Jędrzejewski-Szmek 321670487e NF: xt_recent-echo action
13 years ago
Leonardo Chiquitto 4502adfe69 Fix comments to reflect code
13 years ago
Tom Hendrikx 9fa54cf233 Add Date: header for sendmail*.conf actions
13 years ago
Yaroslav Halchenko 3831fbf98b ENH: add <chain> to action.d/iptables*. Thanks Matthijs Kooijman: see http://bugs.debian.org/515599
14 years ago
Yaroslav Halchenko 638bb66523 BF: Use /var/run/fail2ban instead of /tmp for temp files in actions: see http://bugs.debian.org/544232
14 years ago
Cyril Jaquier e16c18d091 - Added NetBSD ipfilter (ipf command) action. Thanks to Ed Ravin. Tracker #2484115.
16 years ago
Cyril Jaquier 6cd56802bb - Added actions to report abuse to ISP, DShield and myNetWatchman. Thanks to Russell Odom.
16 years ago
Cyril Jaquier 9ed39a4387 - Send file if the number of lines is greater or equal and not only equal to the limit.
17 years ago
Cyril Jaquier 55d6baa66d - Added svn:keywords
17 years ago
Cyril Jaquier f77057d3dd - Fixed Debian bug #462060
17 years ago
Cyril Jaquier 17e31b167e - Replaced "reject" with "drop" in shorwall action. Fix #1854875
17 years ago
Cyril Jaquier 0afa6fb2be - Replaced "echo" with "printf" in actions. Fix #1839673
17 years ago
Cyril Jaquier f0399ca5a4 - Absorbed some Debian patches. Thanks to Yaroslav Halchenko.
17 years ago
Cyril Jaquier c40534123c - Fixed ipfw action script. Thanks to Nick Munger
17 years ago
Cyril Jaquier 26c54c4538 - Added new action iptables-allports. Thanks to Yaroslav Halchenko
18 years ago
Cyril Jaquier 711f936ed0 - Corrected subject
18 years ago
Cyril Jaquier 08c2c55742 - Added sendmail actions. The action started with "mail" are now deprecated. Thanks to Raphaël Marichez
18 years ago
Cyril Jaquier bfab0409a2 - Replaced -d with -f. We are looking for a file, not a directory
18 years ago
Cyril Jaquier b40b9d88d2 - Added a new line before "Regards,"
18 years ago
Cyril Jaquier 0b9c41c015 - Removed actionstart and actionstop which are now obsolete
18 years ago
Cyril Jaquier b4caed8c00 - Added new filter for spam bots
18 years ago
Cyril Jaquier 04cd3f5bd5 - Added new filters/actions. Thanks to Yaroslav Halchenko
18 years ago
Cyril Jaquier 44d75eb54f - Added missing svn:keywords
18 years ago
Cyril Jaquier 2e197487a2 - Fixed removal of host in hosts.deny. Thanks to René Berber
18 years ago
Cyril Jaquier 0c40adda4b - Fixed some comments
18 years ago
Cyril Jaquier 6f7df2cc3c - Use numeric output for iptables in "actioncheck"
18 years ago
Yaroslav Halchenko 90fb1d442e slight english adjustment with no good english: Destinataire->Destination/Addressee
18 years ago
Cyril Jaquier d6e49f8480 - Fixed rebanned bug
18 years ago
Cyril Jaquier 51fd8fac27 - Added ipfw action script and example. Thanks to Nick Munger
18 years ago
Cyril Jaquier 15a4634c38 - Added "shorewall" action
18 years ago
Cyril Jaquier 2bcc036cf2 - Improved configuration files
18 years ago
Cyril Jaquier 5c020b99da - mail-report.conf is not a good idea as the jail is already deleted when creating the report
18 years ago
Cyril Jaquier 7864bdc953 - Improved jail.conf
18 years ago
Cyril Jaquier 1c3088b267 - Added new action
18 years ago
Cyril Jaquier d7682360bc - Clean up configuration files
19 years ago
Cyril Jaquier 4bc6fe419b - Removed a new line
19 years ago
Cyril Jaquier b5c0f7bae2 - Added whois information to mail. Feature Request #1533626
19 years ago
Cyril Jaquier 894bcbdbbf - Improved mail script
19 years ago
Cyril Jaquier be7cc4f81c - Added mail script
19 years ago
Cyril Jaquier 9aa6a505eb - Added header
19 years ago
Cyril Jaquier 7048e19995 - 0.7.0 soon
19 years ago
Cyril Jaquier 12c222bd1c - One step forward to 0.7.0
19 years ago
Cyril Jaquier ea1948eff4 - Initial commit of the new development release 0.7
19 years ago