Daniel Black
2ad26682a9
DOC: ChangeLog for filter.d/sshd
11 years ago
Daniel Black
e12d389c65
MRG/DOC: jail.conf resolution, ChangeLog fixes
11 years ago
Mark McKinstry
ea112b450b
add ChangeLog and THANKS entry
11 years ago
Daniel Black
4b5ecbccd1
ENH: debuggex URLs with fail2ban-regex
11 years ago
Daniel Black
8c2a5612ed
DOC: resolve ChangeLog conflicts
11 years ago
Daniel Black
2a805452c6
DOC: resolve ChangeLog conflicts
11 years ago
Daniel Black
3be7dcd701
DOC: resolve ChangeLog conflicts
11 years ago
Yaroslav Halchenko
596abde712
Merge pull request #352 from grooverdan/recidive
...
ENH: filter.d/recidive - anchor regex at start and support f2b SYSLOG target
11 years ago
Daniel Black
30bb1a77a3
ENH: added syslog prefix to pam-generic filter. Disable regex match for pre 2006 (< 0.99.2.0) versions on linux-pam
11 years ago
Daniel Black
ee497ff1cb
ENH: filter mysqld-auth can be a is a syslog based service so anchor it using syslog prefix
11 years ago
Daniel Black
13ec9d58c0
ENH: filter gssftpd is a syslog based service so anchor it using syslog prefix
11 years ago
Yaroslav Halchenko
bb32295b50
DOC: minor - untabified few entries in the ChangeLog
11 years ago
Yaroslav Halchenko
38b07ca46e
BF: catch and report exceptions while executing commands in client interactive mode ( Close #353 )
11 years ago
Daniel Black
504111b0b1
ENH: filter.d/recidive - anchor regex at start and support f2b SYSLOG target
11 years ago
Daniel Black
ad291d7e38
Merge pull request #346 from grooverdan/bsd-ipfw-default-unreach-port
...
BF: action.d/bsd-ipfw - use blocktype instead of unused action for icmp ...
11 years ago
Daniel Black
e5f1a7f050
Merge pull request #344 from grooverdan/osx
...
ENH: OSX ipfw based on Andy Fragen's work
11 years ago
Yaroslav Halchenko
8ae55fe03b
ChangeLog entries (+few typo fixes) for the last merges
11 years ago
Daniel Black
6b0e2289d4
Merge pull request #335 from grooverdan/gh-333-bind
...
ENH: filter.d/named-refused.conf - BIND 9.9.3 regex changes. Closes gh-333
11 years ago
Daniel Black
f2bcf84893
BF: action.d/bsd-ipfw - use blocktype instead of unused action for icmp rejecting blocked packets
11 years ago
Daniel Black
b31799a322
ENH: add action.d/osx-afctl anonymously contributed on f2b wiki
11 years ago
Daniel Black
908d4adf6f
DOC: credits and thanks for Andy for osx-ipfw
11 years ago
Daniel Black
7cc3e8a8c0
BF: Invert expression on actionstop in bsd-ipfw.conf to ensure exit status 0 on success. Closes gh-343
11 years ago
Daniel Black
d5684a0834
BF: filter.d/routecube-auth - time offset can be positive or negative
11 years ago
Daniel Black
1aabee20f6
DOC: credits for gh-338
11 years ago
Daniel Black
ef903db3c9
ENH: filter.d/named-refused.conf - BIND 9.9.3 regex changes. Closes gh-333
11 years ago
Daniel Black
cfb7dba268
DOC: merge ChangeLog
11 years ago
Daniel Black
b589533d69
Merge branch 'master' into kwirk-merge
...
Conflicts:
ChangeLog
testcases/files/logs/dropbear
11 years ago
Daniel Black
ced271b908
ENH: date for apache-2.4 - adds milliseconds
11 years ago
Yaroslav Halchenko
c84a2e595a
ENH(BF): put 'standard' template after more detailed ones with day of week and year
...
otherwise years present in the freshly contributed by Dan apache regexes do not match
although should have. I had also to adjust failing now vsftpd test
11 years ago
Daniel Black
a9eb8a76c6
merge of change log and apache-auth differences
11 years ago
Yaroslav Halchenko
42f3aa9f62
Merge pull request #329 from grooverdan/bind-unauth-zonetransfer
...
Bind unauth zonetransfer. Closes #323
11 years ago
Daniel Black
6a36ff1a4a
BF: order mailx arguments with dest email address last - redhat bugzilla 998020. Closes gh-328
11 years ago
Daniel Black
61d43608ae
ENH: filter.d/postfix - add filter for VRFY. Closes gh-322
11 years ago
Daniel Black
5d451bc4d6
ENH: add refused zone tranfer to named-refused filter. closes #323
11 years ago
Daniel Black
56faf7f5ad
DOC: fix ChangeLog merge
12 years ago
Steven Hiscocks
11100a2fc0
DOC: Changelog additions for regex changes
12 years ago
Daniel Black
fcf79b475f
ENH: new filter perdition.conf
12 years ago
Yaroslav Halchenko
90ec82669c
DOC: changelog entries for preceeding changes
12 years ago
Steven Hiscocks
728399c39e
Merge pull request #281 from kwirk/dovecot-filter
...
ENH: dovecot filter additions for session, time value and blank user
12 years ago
Daniel Black
ab10664b57
ENH: action.d/hostsdeny to take daemon_list arguement as suggested in README.Solaris
12 years ago
Daniel Black
bf54db7ce7
ENH: ChangeLog notes for apache-auth enhancements
12 years ago
Daniel Black
6ce41a611d
BF: fix filter on apache-auth. Closes #286
12 years ago
Daniel Black
1d6d5a7aae
DOC: ChangeLog merge confict
12 years ago
Daniel Black
174e3dba6d
DOC: Note on new dependency - ed for hosts_deny
12 years ago
Daniel Black
5412d7336f
DOC: ChangeLog confict
12 years ago
Daniel Black
1f5097649c
DOC: ChangeLog for exim-spam.conf filter and tabs->spaces in changelog
12 years ago
Yaroslav Halchenko
5f04b4954f
Merge pull request #280 from yarikoptic/master
...
BF+ENHs: polling backend tracks ino and size now in addition to mtime, filters do not read file unless it has content + few other minor issues
12 years ago
Steven Hiscocks
bfa2b9dec3
ENH: dovecot filter additions for session, time value and blank user
12 years ago
Alexander Dietrich
2155f6bfa5
Update ChangeLog and jail.conf example
12 years ago
Yaroslav Halchenko
5d7ab9e7fb
DOC: Changelog for preceding changes
12 years ago
Daniel Black
256f60adae
DOC: improved log message
12 years ago
Yaroslav Halchenko
e6ebcf6687
Merge branch 'dovecot' of https://github.com/grooverdan/fail2ban
...
* 'dovecot' of https://github.com/grooverdan/fail2ban :
ENH: remove non-capturing groups for readibility
BF: fix dovecot filter for when no TLS is enabled on pop/imap
Conflicts:
ChangeLog -- changelog entries. Also untabified few other spots
12 years ago
Yaroslav Halchenko
f0f237fa05
Merge pull request #269 from grooverdan/asterisk
...
ENH: filter.d/asterisk - consolidate log prefix regex and add a few fail messages
12 years ago
Daniel Black
aebd24ec54
BF: replace with ed so its cross platform, fixes permission problem gh-266, and Yaroslav doesn't revert to perl
12 years ago
Daniel Black
72f9e6a51e
ENH/TST: more samples and rejection types for sender verify fail and rejected RCPT
12 years ago
Daniel Black
3b76fc79f9
BF: fix dovecot filter for when no TLS is enabled on pop/imap
12 years ago
Yaroslav Halchenko
1b170b2aef
BF: support apache 2.4 more detailed error log format. Close #268
12 years ago
Yaroslav Halchenko
6d331bcbea
BF: make colon after [daemon] optional. Close #267
12 years ago
Daniel Black
fa7a105483
ENH: filter.d/asterisk - consolidate log prefix regex and add a few fail messages
12 years ago
Yaroslav Halchenko
b9e971c25d
Merge branch 'exim' of https://github.com/grooverdan/fail2ban
...
* 'exim' of https://github.com/grooverdan/fail2ban :
DOC: credits/blame to me for changes to exim
ENH: new exim filter regexs. Also note a begining PID in this format. Thanks to ftoppi for the log entries
TST/ENH: Improve regex around exim
12 years ago
Yaroslav Halchenko
61f81c6b2f
Changelog entries with close statements for recent changes
12 years ago
Yaroslav Halchenko
2974cac40c
RF: log all logging output from fail2ban-client to stderr. Close #264
...
otherwise it
1. 'interferes' with meaninful output of the client
2. if ERROR is logged it better go to stderr and separating ERROR from other levels is not that transparent with python's logging
12 years ago
Yaroslav Halchenko
1ab0f0f9e3
Merge branch 'master' of https://github.com/yarikoptic/fail2ban
...
* 'master' of https://github.com/yarikoptic/fail2ban :
DOC: Changelog for fail2ban-regex RF
ENH: fail2ban-regex -- add specification of loglevels to enable
RF: reworked -regex cmdline tool to use optparse, some unification and enhancement of outputs
ENH: 'heavydebug' level == 5 for even more debugging in tricky cases
Conflicts:
ChangeLog
12 years ago
Daniel Black
b8cfda68b8
ENH: new exim filter regexs. Also note a begining PID in this format. Thanks to ftoppi for the log entries
12 years ago
Yaroslav Halchenko
9d4b613ee4
Merge branch '3proxy' of https://github.com/grooverdan/fail2ban
...
* '3proxy' of https://github.com/grooverdan/fail2ban :
BF: fix to proxy port in 3proxy example
ENH: sample log + more specific regex
BF: authentication errors end in 01-09 but the beginning part indicates the service as per https://github.com/fail2ban/fail2ban/issues/246#issuecomment-19327955 thanks to ykimon
BF: need to anchor the start to avoid another repeat of DoS injection like Apache
ENH: stricter regex thanks to Steven Hiscocks (kwirk)
DOC: credits
Conflicts:
ChangeLog
12 years ago
Yaroslav Halchenko
173fe48e77
Merge branch 'exim' of https://github.com/grooverdan/fail2ban
...
* 'exim' of https://github.com/grooverdan/fail2ban :
BF/ENH: Incorrect authentication data doesn't need tailier so that's optional. Also gained log entry for Unrouteable address
ENH: readibility thanks to Yaroslav
ENH/BF: exim improvements with sample
Conflicts:
ChangeLog
12 years ago
Yaroslav Halchenko
ec629ab4e8
Merge branch 'proftpd' of https://github.com/grooverdan/fail2ban
...
* 'proftpd' of https://github.com/grooverdan/fail2ban :
ENH: proftpd chan accept usernames with spaces
ENH: injection of fail data into USER field
ENH: proftp regex hardening and log messages
Conflicts:
ChangeLog
12 years ago
Yaroslav Halchenko
ab2c738b43
Merge branch 'dovecot' of https://github.com/grooverdan/fail2ban
...
* 'dovecot' of https://github.com/grooverdan/fail2ban :
TST: attempts at injection with username=rhost=1.2.3.4 have no user= logged in dovecot-1.2.15
ENH: dovecot regexs rewritten and extra failures
Conflicts:
ChangeLog -- merged entries
12 years ago
Yaroslav Halchenko
948be73115
Merge branch 'assp' of https://github.com/grooverdan/fail2ban
...
* 'assp' of https://github.com/grooverdan/fail2ban :
BF: missed a space
BF: [SSL-out] is optional in assp
ENH: regex hardening on assp
Conflicts:
ChangeLog -- merged the two entries into 1
12 years ago
Yaroslav Halchenko
77044fce35
DOC: Changelog for fail2ban-regex RF
12 years ago
Yaroslav Halchenko
9b351350dd
DOC: Changelog for asterisk hardening
12 years ago
Daniel Black
d4940563d3
ENH: regex hardening on assp
12 years ago
Daniel Black
dbe7ffe050
ENH: dovecot regexs rewritten and extra failures
12 years ago
Daniel Black
4c67a269bf
ENH: proftp regex hardening and log messages
12 years ago
Daniel Black
3e3802512a
ENH/BF: exim improvements with sample
12 years ago
Yaroslav Halchenko
460e09af66
it was not the end of the world and we should continue
12 years ago
Yaroslav Halchenko
921d9a8e4b
DOC: add information on where to report vulnerabilities + pointer to HOWTO_Seek_Help
...
originally following command was used to add header to all config files:
sed -ie '/# Author/ i\# Please report vulnerabilities to fail2ban-vulnerabilities at lists dot sourceforge dot net\n# and see http://www.fail2ban.org/wiki/index.php/HOWTO_Seek_Help for generic bug-reports.\n#' action.d/* filter.d/*
but it would be overkill ATM causing havoc in user-tuned configs -- postponed for now
Also adjusted the release date for today (by mistake in 1 commit ... sorry)
12 years ago
Yaroslav Halchenko
728b5e8bf4
Changes for 0.8.10 release (changelog, version, etc)
12 years ago
Daniel Black
16d63434ef
DOC: credits
12 years ago
Daniel Black
4787777cee
DOC: credits for gh-244
12 years ago
Daniel Black
28fc14d010
DOC: credits
12 years ago
Yaroslav Halchenko
39d32e0352
Changelog for previous PR
12 years ago
Yaroslav Halchenko
567cd353a1
DOC: Changelog entry fro preceeding merge from Terence
12 years ago
Yaroslav Halchenko
d2b1c73b92
CFG: assure actions for all the jails
12 years ago
Yaroslav Halchenko
89e06bba15
BF: blocktype must be defined within [Init] -- adding [Init] section. Close #232
12 years ago
Yaroslav Halchenko
725d666ee6
Getting ready for further development
12 years ago
Yaroslav Halchenko
a7f41af671
All the (version) updates for the release of 0.8.9
12 years ago
Yaroslav Halchenko
0e5f7b5951
Merge branch '_enh/strip_crlf'
...
* _enh/strip_crlf:
Changelog for preceeding commit
ENH: strip CR and LF while analyzing the lines (processLine) (Close #202 )
12 years ago
Yaroslav Halchenko
f4d2b5b338
Previous coverage was 56% (without disregarding any pragma)
12 years ago
Yaroslav Halchenko
239406a8b9
Changelog for preceeding commit
12 years ago
Yaroslav Halchenko
2b1e19933f
Merge branch 'master' of git://github.com/fail2ban/fail2ban
...
* 'master' of git://github.com/fail2ban/fail2ban:
BF: missed MANIFEST include
DOC: credits for bsd-ipfw
ENH: add ipfw rule for bsd using the tables.
12 years ago
Yaroslav Halchenko
976a65bb89
Merge branch 'bsd_logs' of https://github.com/grooverdan/fail2ban
...
* 'bsd_logs' of https://github.com/grooverdan/fail2ban :
ENH: separate out regex and escape a .
BF: missed MANIFEST include
DOC: credits for bsd log
DOC: bsd syslog files thanks to Nick Hilliard
BF: change common.conf to handle formats of syslog -v and syslog -vv in BSD
Conflicts:
config/filter.d/common.conf
12 years ago
Yaroslav Halchenko
5accc10a47
Merge pull request #206 from grooverdan/bsd_ipfw
...
NF: BSD ipfw
12 years ago
Yaroslav Halchenko
0ae49ab11e
Merge branch 'bsd_pf' of https://github.com/grooverdan/fail2ban
...
* 'bsd_pf' of https://github.com/grooverdan/fail2ban :
BF: missed MANIFEST include
DOC: add jail.conf entry for pf
DOC: credit for pf action. Origin: http://svnweb.freebsd.org/ports/head/security/py-fail2ban/files/patch-pf.conf?view=log
ENH: pf action thanks to Nick Hilliard <nick@foobar.org>.
Conflicts:
ChangeLog
12 years ago
Yaroslav Halchenko
e85914cef8
Merge pull request #215 from grooverdan/reject_no_drop_by_default
...
ENH: add blocktype to all relevant actions and change default action to reject
12 years ago
Yaroslav Halchenko
11031d5ec9
DOC: Slight tune ups to ChangeLog -- we must release!
12 years ago
Yaroslav Halchenko
63b9e4f358
Changelog entries for the latest merges
12 years ago
Daniel Black
ac1944ac6d
DOC: ChangeLog for default action type change
12 years ago
Daniel Black
462dafa32f
DOC: credit for pf action. Origin: http://svnweb.freebsd.org/ports/head/security/py-fail2ban/files/patch-pf.conf?view=log
12 years ago
Daniel Black
f402609f19
DOC: credits for bsd-ipfw
12 years ago