Yaroslav Halchenko
fa21222c63
* Moved iptables into recommends since fail2ban can work without iptables
...
using some other action (e.g hosts.deny)
17 years ago
Yaroslav Halchenko
f8b17f3859
* Added Vcs- fields, moved Homepage into source header's field
17 years ago
Yaroslav Halchenko
2553e2717a
* Added force-start action to init script, so it could be forced
...
to start if previous run crashed and left a socket file. Must to be
used with caution.
17 years ago
Yaroslav Halchenko
8d9aca4e20
* Fixed named-refused filter.
17 years ago
Yaroslav Halchenko
99dbe90ad2
releasing
17 years ago
Yaroslav Halchenko
413ec5317e
first pre-release version of 0.8.1
17 years ago
Yaroslav Halchenko
0012f9ff92
* (NOT RELEASED YET) New upstream release.
...
Patches absorbed upstream:
00_daemon_pids.dpatch
00_iptables_allports.dpatch
00_vsftp_filter_spaces.dpatch
00_resolve_all_names.dpatch
00_HOST_ignoreregex.dpatch
Patches which needed some tune-up:
00_ssh_strong_re.dpatch
00_mail-whois-lines.dpatch
00_named_refused.dpatch
17 years ago
Yaroslav Halchenko
e10a8616b4
fetched fresh upstream 0.8.1
17 years ago
Yaroslav Halchenko
922b5035ea
actually we never released pre-release
17 years ago
Yaroslav Halchenko
85b75c77fb
* Resolve all "names" which became a part of <HOST>. Previousely only fqdn's
...
were resolved
18 years ago
Yaroslav Halchenko
c5202ce696
* Added optional spaces at the end of failregex for vsftpd.
18 years ago
Yaroslav Halchenko
58ae2a5a75
* Added new time template matching named log entries
18 years ago
Yaroslav Halchenko
95d17ee318
* Adjusted failregex for sshd filter:
...
- anchored properly at the end of line, and source code has .examples
files to perform testing of the rules.
- added new explicit rule for users not in the AllowUsers lists
18 years ago
Yaroslav Halchenko
3aef16b773
* jail.conf has specification of protocol (default to tcp) to be provided to
...
banaction
18 years ago
Yaroslav Halchenko
14d3ffc6de
* Added a filter for named to catch refused/denied queries
18 years ago
Yaroslav Halchenko
f58421eabf
* Use /var/run to keep socket file ( closes : #425746 )
18 years ago
Yaroslav Halchenko
a9ecd98ffe
Added port param in jail since otherwise -- crashes
18 years ago
Yaroslav Halchenko
2e55bc57c7
* Added a filter pam_generic to catch any login errors.
...
* Added iptables-allports.
18 years ago
Yaroslav Halchenko
bc0806d459
* Moved <HOST> expansion into regex.py ( closes : #429263 ). Thanks James
...
Andrewartha.
* Added optional regexp entry for process PID in some entries (closes:
#426050 ). Thanks Roderick Schertler.
18 years ago
Yaroslav Halchenko
cc5ec4dcde
releasing
18 years ago
Yaroslav Halchenko
e55dfeaf3a
untabified last entry
18 years ago
Yaroslav Halchenko
cc1ed23b40
* Applied changes submitted by Bernd Zeimetz (thanks Bernd):
...
- Removed obsolete Build-Depends-Indep on help2man, python-dev
- Explicit removal of *.pyc files compiled during build
- Invoke 'python setup.py clean' in clean target, which required also
to move python into Build-Depends
* Minor clean up of debian/rules
18 years ago
Yaroslav Halchenko
be824f4e00
adjusted to be prerelease of the package
18 years ago
Yaroslav Halchenko
c58a100259
* Manually changing the order of debhelper inserted scripts in prerm
...
(Closes : #422655 )
* Removed obsolete hack to have /bin/env invocation of python for
fail2ban-* scripts
18 years ago
Yaroslav Halchenko
e9397ea375
* New stable upstream release
18 years ago
Yaroslav Halchenko
10718c1036
initial upgrade to 0.8.0
18 years ago
Yaroslav Halchenko
d15f9d0206
* New upstream release
...
* Updated copyright to include current year
* Removed patches absorbed upstream
18 years ago
Yaroslav Halchenko
5dcec130f6
adjusted changelog -- releasing finally
18 years ago
Yaroslav Halchenko
7c30a3097b
* Applied post-release upstream changes to resolve issues with
...
- Close opened handlers to log file
- Fixed "reload" bug
18 years ago
Yaroslav Halchenko
d345865621
* New upstream release
...
* Applied post-release changes to resolve issues with gamin and not closed
on reload log file
18 years ago
Yaroslav Halchenko
ee3f91176c
* New upstream release (included most of the debian-provided patches -- new
...
filters and actions)
* Refreshed and made verbatim homepage in description
18 years ago
Yaroslav Halchenko
a4c15ea883
* NOT RELEASED YET
...
* Made homepage in description verbatim
18 years ago
Yaroslav Halchenko
936fee7c40
* Use /usr/bin/python interpreter instead of wrapped call to python by
...
/usr/bin/env
18 years ago
Yaroslav Halchenko
878fa0dedd
* Synchronized action.d/iptables-* rules from upstream SVN (closes:
...
#407561 )
* Minor: options renames in the comments to be in sync with upstream
18 years ago
Yaroslav Halchenko
7a1dd9e98c
* iptables-multiport is default action to take since Debian kernel arrives
...
with multiport module. That is to address the fact that most services
listen on multiple port (for encrypted and non-encrypted connections)
* Added [courierauth] jail (First 2 items are to partially address #407404
18 years ago
Yaroslav Halchenko
85d8604209
removed empty lines
18 years ago
Yaroslav Halchenko
36b1833e31
* Adjusted default log file for postfix to be /var/log/mail.log
...
(Closes : #404921 )
18 years ago
Yaroslav Halchenko
e570f14a5d
releasing
18 years ago
Yaroslav Halchenko
f01c74581d
fixed action_ shortcuts
...
adjusted initd script to be verbose on start if socketfile exists
18 years ago
Yaroslav Halchenko
7fa686a7f2
* New upstream release, which incorporates fixes introduced in 3~pre
...
non-released versions (which were suggested to the users to overcome
problems reported in bug reports). In particular attention should be paid
to upstream changelog entries
- Several "failregex" and "ignoreregex" are now accepted.
Creation of rules should be easier now.
This is an alternative solution to 'multiple <HOST>' entries fix,
which is not applied to this shipped version - pay cautios if upgrading
from 0.7.5-3~pre?
- Allow comma in action options. The value of the option must
be escaped with " or '.
That allowed to implement requested ability to ban multiple ports
at once (See 373592). README.Debian and jail.conf adjusted to reflect
possible use of iptables-mport
- Now Fail2ban goes in /usr/share/fail2ban instead of
/usr/lib/fail2ban. This is more compliant with FHS.
Patch 00_share_insteadof_lib no longer applied
* Refactored installed by debian package jail.conf:
- Added option banaction which is to incorporate banning agent
(usually some flavor of iptables rule), which can then be easily
overriden globally or per section
- Multiple actions are defined as action_* to serve as shortcuts
18 years ago
Yaroslav Halchenko
e8ce484c05
reworked init script a bit: waiting on stop and ping instead of status
18 years ago
Yaroslav Halchenko
a81dd8b103
boosted version
18 years ago
Yaroslav Halchenko
97ab74de5f
* Not applying patch any more for rigid python2.4 - it is default now in
...
sid/etch
18 years ago
Yaroslav Halchenko
4d5ec804f5
* Added filter ssh-ddos to fight DDOS attacks. Must be used with caution if
...
there is a possibility of clients accessing through unreliable connection
(Closes : #404487 )
18 years ago
Yaroslav Halchenko
832a8a4346
* Moved call to dh_pycentral before dh_installinit
...
* Removed unnecessary call of dh_shlibdeps
18 years ago
Yaroslav Halchenko
ebc5c6106f
HOSTisized vsftpd regex
18 years ago
Yaroslav Halchenko
caf85bf265
* Made fail2ban-server tollerate multiple <HOST> entries in failregex
18 years ago
Yaroslav Halchenko
ae96eaa40c
made failregex universal for both PAM and native vsftpd logging
18 years ago
Yaroslav Halchenko
2e992c2353
* Fail2ban now bans vsftpd logins (corrected logfile path and failregex)
...
(Closes : #404060 )
18 years ago
Yaroslav Halchenko
14a2a45dbc
releasing
18 years ago