4283 Commits (351abeb4ff77dfca4049e7401553900b46e8db40)

 

All Branches   

Search

Author	SHA1	Message	Date
sebres	7e442c5b27	filter.d/sendmail-reject.conf: ... - rewritten using `prefregex` and used MLFID-related multi-line parsing (by using tag `<F-MLFID>` instead of buffering with `maxlines`); - optional parameter `mode` introduced: normal (default), extra or aggressive (see sendmail-reject for regex details); test cases extended	8 years ago
sebres	a683e88a74	samples test case factory extended with filter options - dict in JSON to control filter options (e. g. mode, etc.): ... # filterOptions: {"mode": "aggressive"}	8 years ago
sebres	52ed6597b2	Merge remote-tracking branch 'remotes/gh-upstream/master' into 0.10	8 years ago
Serg G. Brester	d3b644acae	Merge pull request #1708 from sebres/fix-gh-1707 ... filter.d/cyrus-imap.conf: accept entries without login-info resp. hostname before IP address (gh-1707)	8 years ago
sebres	0f8cb1749f	Update ChangeLog	8 years ago
sebres	8768776d68	filter.d/cyrus-imap.conf: fixed `failregex` - accept entries without login-info resp. hostname before IP address	8 years ago
Serg G. Brester	d042981954	Merge pull request #1655 from ajcollett/0.10 ... Added config for AbuseIPDB	8 years ago
Serg G. Brester	b1f5ac9484	Update abuseipdb.conf	8 years ago
Serg G. Brester	62fa02241f	Update jail.conf	8 years ago
Serg G. Brester	e71f3d595f	Merge pull request #1705 from sebres/0.10-tag-ip-host ... New actions tag `<ip-host>` introduced: can be used in actions to retrieve the host name (dns) from the IP address	8 years ago
sebres	6a2c95da95	`action.d/sendmail-geoip-lines.conf` fixed using new tag `<ip-host>` (dns-cache and without external command execution); ... changelog updated;	8 years ago
sebres	59cf761129	Real action info instead of calling map in test cases, covering of the new tag '<ip-host>'; ... dns lookup: pre-caching within test cases - prevent slow dns-resolving and failures if no-network, of if some IP addresses will be changed later	8 years ago
sebres	a0bb51ef92	New tag '<ip-host>' introduced: can be used in actions to retrieve the host name (dns) from the IP address	8 years ago
sebres	b832b77e3c	small amendment for test-coverage; ... dynamical monitor failures test classes get proper names running in python3.x (wrong __qualname__)	8 years ago
Serg G. Brester	32ac383d06	Update ChangeLog	8 years ago
Serg G. Brester	81129f0e5c	Merge pull request #1698 from sebres/0.10-filter-captures-to-actions ... 0.10 filter captures to actions	8 years ago
sebres	e4a265c75f	test coverage	8 years ago
sebres	d2a3d093c6	rewritten CallingMap: performance optimized, immutable, self-referencing, template possibility (used in new ActionInfo objects); ... new ActionInfo handling: saves content between actions, without interim copying (save original on demand, recoverable via reset); test cases extended	8 years ago
sebres	4efcc29384	coverage of new multi-line handling within fail2ban-regex	8 years ago
sebres	35efca5941	Better multi-line handling introduced: single-line parsing with caching of needed failure information to process in further lines. ... Many times faster and fewer CPU-hungry because of parsing with `maxlines=1`, so without line buffering (scrolling of the buffer-window). Combination of tags `<F-MLFID>` and `<F-NOFAIL>` can be used now to process multi-line logs using single-line expressions: - tag `<F-MLFID>`: used to identify resp. store failure info for groups of log-lines with the same identifier (e. g. combined failure-info for the same conn-id by `<F-MLFID>(?:conn-id)</F-MLFID>`, see sshd.conf for example) - tag `<F-NOFAIL>`: used as mark for no-failure (helper to accumulate common failure-info); filter.d/sshd.conf: [sshd], [sshd-ddos], [sshd-aggressive] optimized with pre-filtering using new option `prefregex` and new multi-line handling.	8 years ago
sebres	8bcaeb9022	amend to 4ff8d051f49808ac769709c5aff8591fcd79040a: fixed fail2ban-regex with journalmatch using systemd-journal	8 years ago
sebres	22afdbd536	Several filters optimized with pre-filtering using new option `prefregex`	8 years ago
sebres	2fad50b6e8	Precedence of `prefregex` higher as `failregex` should be in head of the convert-stream; ... Allow using failure-id (`<HOST>`) within `prefregex` (by common prefix for all expressions specified with `failregex`)	8 years ago
sebres	4ff8d051f4	Introduced new filter option `prefregex` for pre-filtering using single regular expression; ... Some filters extended with user name; [filter.d/pam-generic.conf]: grave fix injection on user name to host fixed; test-cases in testSampleRegexsFactory can now check the captured groups (using additionally fields in failJSON structure)	8 years ago
sebres	9d15a792a5	amend to fe06ffca71e9054b21b93237c40c0c53478a19df: small optimization using already known IP family	8 years ago
sebres	fe06ffca71	Fix retrieving of IPv6 address with dnsToIp on some systems (default returns AF_INET family only), fix network test-cases.	8 years ago
sebres	61c8cd11b8	Exposes filter group captures in actions (non-recursive interpolation of tags `<F-...>`); ... Closes gh-1110	8 years ago
sebres	6d878f3a43	try to provide filter captures (already in ticket data) to the actions as interpolation options (closes gh-1110)	8 years ago
Serg G. Brester	2fa18a74c4	Merge branch 'master' into master	8 years ago
sebres	a8c0cec4ac	small amend with several fixes and test coverage	8 years ago
sebres	9ebf70cd6a	Safer, more stable and faster replaceTag interpolation (switched from cycle over all tags to re.sub with callable)	8 years ago
sebres	a6318b159b	substituteRecursiveTags optimization + moved in helpers facilities (because currently used commonly in server and in client)	8 years ago
sebres	3fae8a7e43	amend to fc315be4ea88c3619f984542b21c95820f53d87b: parse and interpolate all options in section "Definition" (section "Init" no more needed), ... because of better performance with this solution;	8 years ago
sebres	4bf09bf297	provides new tag `<ip-rev>` for PTR reversed representation of IP address; ... [action.d/complain.conf] fixed using this new tag;	8 years ago
sebres	fc315be4ea	try to parse and interpolate all options in section "Definition" (section "Init" no more needed)	8 years ago
Serg G. Brester	7f63809afb	Merge branch '0.10' into patch-1	8 years ago
Serg G. Brester	2d12349eac	Update servertestcase.py ... Make the test-case gh-1685 compliant	8 years ago
sebres	abd80696ab	Merge branch 'py-3.6-compat' into 0.10	8 years ago
sebres	cf53a834f7	python-3.6 compatibility: ... - dynamical string replacement within call of regexp.sub fixed with lambda-replacement (otherwise "sre_constants.error: bad escape \s at position"); - optional arguments (3.6 has more agrs by calling of SMTPServer.process_message); - implicit convert byte to string, because python3.6 fails on binary data (test_smtp).	8 years ago
sebres	01db0b5028	small performance fix after merge with 0.10 ... (cherry picked from commit 8e2711681c)	8 years ago
sebres	63f7916886	fix test cases by testing with multi-threaded execution (wait for threaded execution done) ... (cherry picked from commit 1ec6782f32) # Conflicts: # fail2ban/tests/observertestcase.py (not yet available in 0.10)	8 years ago
sebres	f35aa6d258	coverage: added python3.6	8 years ago
sebres	40837754c9	python3.6 compatibility fix	8 years ago
Christoph Theis	861ce4177c	#1689: Make lowest rule number in action.d/bsd-ipfw.conf configurable	8 years ago
Felix Yan	68d829c1dd	Add a path configuration for Arch Linux	8 years ago
Jan Grewe	58c68b75f0	Remove double-quotes from email addresses	8 years ago
Jan Grewe	1bcf0de7c1	Update complain.conf	8 years ago
Serg G. Brester	ac7be38dbe	Merge pull request #1686 from Slamdunk/postfix-rbl-554-SMTP ... Postfix RBL: 554 & SMTP	8 years ago
Filippo Tessarotto	607568f5da	Postfix RBL: 554 & SMTP	8 years ago
Jan Grewe	901eeff53d	Make Abusix lookup compatible with Dash	8 years ago