sebres
8b1225f177
several amend fixes after cherry pick from 10th branch
8 years ago
sebres
3e330604c7
several test cases rewritten using new assertIn, assertNotIn (better as own from unittest, because support generators beautifying, etc.)
...
+ new forward compatibility method assertRaisesRegexp;
+ methods assertIn, assertNotIn, assertRaisesRegexp are test covered now;
+ easy-fix for distributions compatible test cases (e.g. fedora default backend is 'systemd'), (closes gh-1353, closes gh-1490)
cherry picked from 9d56079756
(0.10 branch)
8 years ago
rhardy613
f73746d846
Fix ASSP filter to work with current release of ASSP
...
ASSP V1 development stopped at the end of 2014 and it is now deprecated.
All users were urged to upgrade to ASSP V2 which is still actively
developed. For some reason fail2ban 0.9.5 (and trunk) still have code
which only understands ASSP V1 logs. This means the filter ignores brute
force attacks against ASSP.
8 years ago
Yaroslav Halchenko
d9f039df03
Merge branch 'master' of git://github.com/fail2ban/fail2ban
...
* 'master' of git://github.com/fail2ban/fail2ban:
BF: do not rely on long relative path to upstairs config - symlink dereferenced copied during install (#1485 )
8 years ago
Yaroslav Halchenko
cee09e29ec
BF: do not rely on long relative path to upstairs config - symlink dereferenced copied during install ( #1485 )
...
* BF: do not rely on long relative path to upstairs config - symlink common.conf
* Added missing files to MANIFEST
8 years ago
Yaroslav Halchenko
dca5ff44c2
Merge branch 'bf-common-zzz'
...
* bf-common-zzz:
BF: do not rely on long relative path to upstairs config - symlink common.conf
8 years ago
Yaroslav Halchenko
79616b76bf
Added missing files to MANIFEST
8 years ago
Yaroslav Halchenko
687ea8d333
BF: do not rely on long relative path to upstairs config - symlink common.conf
8 years ago
Yaroslav Halchenko
5714ac201b
DOC: preparations for 0.9.5 release
8 years ago
Yaroslav Halchenko
0f88e8a658
Added missing files to MANIFEST
8 years ago
Yaroslav Halchenko
72c4743666
Merge pull request #1481 from yarikoptic/doc-changelog
...
Doc changelog - reformatted for markdown and a bit less indentation
8 years ago
Yaroslav Halchenko
21056c995d
Merge remote-tracking branch 'origin/master' into doc-changelog
...
* origin/master:
another variant of regex
add trailing anchor to failregex
add PR id to ChangeLog
improved failregex according to @sebres recomendations
* add `__prefix_line` to regex * fix time in log file
add info to log file
added sample log lines for slapd
adding openldap slapd filter
8 years ago
Yaroslav Halchenko
28a0605f69
Merge pull request #1478 from gips0n/master
...
adding openldap slapd filter
8 years ago
Andrii Melnyk
7433b353ee
another variant of regex
8 years ago
Andrii Melnyk
7c5828dd2a
add trailing anchor to failregex
8 years ago
Yaroslav Halchenko
33ed71b3de
DOC: Reformatted ChangeLog into legit Markdown ( Closes #962 )
9 years ago
Yaroslav Halchenko
ec9c4a27f3
DOC: tuned up ChangeLog entries for 0.9.5
...
unified capitalized beginning of each entry
no trailing spaces or dots etc
9 years ago
Andrii Melnyk
2c5a489bc7
add PR id to ChangeLog
9 years ago
Andrii Melnyk
48c094f612
improved failregex according to @sebres recomendations
9 years ago
sebres
de5d911fd5
Merge branch 'asterisk_pjsip_2'
9 years ago
sebres
f5f204ca7c
Improved changes of gh-1458:
...
`[^']*` after callid was wrong, changed to `[^\)]*`;
regexp anchored at the end;
almost the same regex grouped to one;
Closes #1458
9 years ago
nturcksin
72a157b8f2
Improve PJSIP log support for asterisk 13+ with different callID (Squash gh-1458)
...
Change the asterisk pjsip filter to don't take the callId part
Add optional part between "Request" and "from"
Listed all log message from asterisk
9 years ago
Andrii Melnyk
dcb69b0242
* add `__prefix_line` to regex
...
* fix time in log file
9 years ago
Andrii Melnyk
c335663395
add info to log file
9 years ago
Andrii Melnyk
c9ab669851
added sample log lines for slapd
9 years ago
Andrii Melnyk
b2e3affaa0
adding openldap slapd filter
9 years ago
Serg G. Brester
af8b650a37
badip timeout option introduced, set to 30 seconds in our test cases ( #1463 )
...
cherry-picked from 0.10 (little bit modified in test_badips.py, because no --fast option in test cases)
9 years ago
Yaroslav Halchenko
11f7cf5ad8
DOC: changelog for recent exim filters tune up
9 years ago
Yaroslav Halchenko
636a93f58b
Merge pull request #1438 from yarikoptic/bf-exim
...
exim filters -- make wider use of host_info helper str susbstitution + fix for #1430
9 years ago
Ludovic Gasc
f85fb45b29
Asterisk pjsip ( #1456 )
...
* Improve PJSIP log support for Asterisk 13+
* Update changelog: filter.d/asterisk.conf - fix security log support for PJSIP and Asterisk 13+
* Change pjsip regexp with sebres observation, thanks to @nturcksin
9 years ago
Yaroslav Halchenko
ced6c8307b
BF: finalize that sample log line for exim4
...
was intended in 743a531eb5
to be an entry without a port
after the [host]
9 years ago
sebres
b85347477f
Amend merge for pull request #1454
9 years ago
sebres
b3bb8b20bf
amend for new option of `usedns=raw` - forgotten validation fix inside setUseDns
9 years ago
Serg G. Brester
f23ccbda35
Merge pull request #1454 from sebres/gh-67-ban-wo-host
...
[gh-67] no-host ban
9 years ago
Yaroslav Halchenko
6434661480
RF: for consistency use (?:XXX)? instead of (?:|XXX)
9 years ago
Yaroslav Halchenko
48a8324662
ENH: use non-capturing regex groups in exim-common and exim filters
9 years ago
sebres
8ec4e1189e
use raw host (don't use textToIp) if usedns exactly `raw`, because `usedns = no` should ignore no ip failures
9 years ago
sebres
c33e25bab6
fail2ban-regex: extended with option '--raw' (switch to raw host, prevent resolving of ip)
9 years ago
sebres
b7787f4af4
use raw host (don't use textToIp) if usedns not yes or warn
9 years ago
Yaroslav Halchenko
e01cd8ab03
Merge pull request #1444 from yarikoptic/enh-courier-username
...
ENH: courier-smtp -- allow for trailing username (no spaces) in the logline
9 years ago
sebres
858c5c0d00
Merge branch 'gh-1417'
9 years ago
sebres
a80043ce80
amend for gh-1419: tags substitution bug - wrong recognition of cyclic recursion, new test cases covered this
9 years ago
sebres
9df7973e95
Merge pull request #1439 from yarikoptic/enh-ignoreipsplit:
...
ENH: splitcommaspace -> splitwords allow to split ignoreip entries with new lines
9 years ago
sebres
156065e70d
splitwords: prevent to split to empty values by multiple separator characters together
9 years ago
Yaroslav Halchenko
9bb869b8d4
ENH: courier-smtp -- allow for trailing username (no spaces) in the logline
...
Closes #1440
9 years ago
Yaroslav Halchenko
01d0506ea0
ENH: splitcommaspace -> splitwords allow to split ignoreip entries with new lines
...
Closes #1432
9 years ago
Yaroslav Halchenko
8b8cf2a660
ENH: exim filters -- make more use of %(host_info)s which in turn made more flexible
9 years ago
Yaroslav Halchenko
743a531eb5
BF: make :port and I=[ip]:port optional for a "AUTH command used when not advertised"
...
Closes #1430
9 years ago
Serg G. Brester
b56f4c533e
Merge pull request #1436 from sebres/speedup-db
...
extremely speedup of all database operations
9 years ago
sebres
1718c8dbe9
pypy: switch journal mode after upgrade (save it during the upgrade), to prevent errors like "database table is locked"
9 years ago