Yaroslav Halchenko
4a1fd888f0
Carry on development
8 years ago
Yaroslav Halchenko
3605155978
updated man pages
8 years ago
Yaroslav Halchenko
482252dbd4
ENH: prep for 0.9.6 release (as of tomorrow)
8 years ago
Yaroslav Halchenko
e550850b9c
BF: added missing entires into MANIFEST
8 years ago
Serg G. Brester
556a9373ce
Update ChangeLog
8 years ago
Serg G. Brester
feae7370ce
Update THANKS
8 years ago
sebres
45f1d811c9
Merge branch 'alex1702-1586'
8 years ago
sebres
67c14afd8e
ChangeLog entry added + jail.conf review
8 years ago
sebres
425170cef3
code review, makes the test cases workable, added dev-notes
8 years ago
Serg G. Brester
8d9fe5d3da
Merge pull request #1583 from sebres/_0.10/fix-datedetector-grave-fix-v2
...
0.10/datedetector grave fix
8 years ago
sebres
8018796b45
wrong indentation (important code-piece in if log-level only)
8 years ago
sebres
39c343bd06
better reorder templates handling, code coverage increase (a small part of _reorderTemplate was not covered at all)
8 years ago
sebres
5d5ab27435
small amend: removed unreachable code + coverage increase
8 years ago
Serg G. Brester
f827675822
Merge pull request #1627 from sebres/fix-gh-1626
...
Fix gh-1626: one space after ModSecurity
8 years ago
sebres
b8c41dcb49
ChangeLog update
8 years ago
sebres
931eab84b5
`filter.d/apache-modsecurity.conf`
...
- fixed for newer version (one space, closes gh-1626)
reviewed and optimized:
- non-greedy catch-all replaced for safer match
- unneeded catch-all anchoring removed
- non-capturing groups
8 years ago
sebres
c06084d7d9
_start_params - fix: symlinks should be absolute paths
8 years ago
sebres
40cbe96352
Merge remote-tracking branch 0.10 into _0.10/fix-datedetector-grave-fix-v2
8 years ago
Serg G. Brester
389ad10344
Merge pull request #1622 from sebres/_0.10/configreader-and-more
...
0.10/configreader and more: substitution `%(param)s` from init block
8 years ago
Serg G. Brester
b8b5907706
Merge pull request #1624 from sebres/fix-gh-1623
...
filter.d/dovecot.conf update: ignore additionally irrelevant info in anchored regex before "auth failed"
8 years ago
sebres
5678d08a79
filter.d/dovecot.conf update:
...
- fixes failregex, that ignores failures through some irrelevant info (closes #1623 );
- ignores whole additionally irrelevant info in anchored regex before fixed failure data `\((?:auth failed, \d+ attempts( in \d+ secs)?|tried to use (disabled|disallowed) \S+ auth)\)`
- review, IPv6 compatibility fix, non-capturing groups
8 years ago
sebres
ce540554c5
Merge configreader-py3-compat branch into _0.10/configreader-and-more
8 years ago
sebres
ec7bb0d6c9
python 3x compatibility fix (positional arguments vs named arguments)
8 years ago
Serg G. Brester
ac1729e473
Merge pull request #1620 from fail2ban/close-gh-1120
...
jail.conf: added `knocking_url` filter-parameter of `pass2allow-ftp`...
8 years ago
sebres
a2af19c9f0
fixed several actions, that could not work with jails using multiple logpath; additionally repaired execution in default shell (bad substitution by `${x//...}` executing in `/bin/sh`);
...
added helper "action.d/helpers-common.conf", and `_grep_logs` part-command for actions needed grep logs from multiple log-files
test cases: executing of some complex actions covered
8 years ago
sebres
65abc639cc
allow newline in extra init-parameters of action/filter (or interpolation of it), e. g. action[..., logpath="%(logpath)s"]
8 years ago
sebres
097970781c
filter/action (and its includes): substitution `%(param)s` may be used now (instead of `<param>`) for init-values specified in jail-configs via `action[param1="...", param2=...]`;
...
substitution `<param>` should be used for dynamic interpolation only (todo: review configurations to replace it);
8 years ago
sebres
b856e1dadc
Merge pull request #1618 from sebres/_0.10/systemd-service
8 years ago
sebres
308bba448c
ChangeLog update
8 years ago
sebres
95dd76b7dd
Merge pull request #1619 from sebres/_0.10/skip-wrong-jails
8 years ago
sebres
d908688b56
ChangeLog update
8 years ago
Serg G. Brester
4f5389fee5
Update jail.conf
8 years ago
sebres
45174c5eaf
if fail2ban running as systemd-service, for logging to the systemd-journal, the `logtarget` could be set to STDOUT
...
small fixes by logging in stdout (+ system targets also allowed in lowercase now)
8 years ago
sebres
1cd67ecaa2
automatically creates /var/run/fail2ban before start fail2ban (systems which /var/run/ is virtual resp. memory mount device)
8 years ago
sebres
7256a5cb8e
code review: back to previous code - no skipping in testReadTestJailConf
8 years ago
sebres
8ed5b44bfd
no cover for sporadic executed (time-related) code pieces (just to prevent randomly increasing/decreasing of coverage)
8 years ago
sebres
fdac44ca58
introduced new option `-t` or `--test` to test configuration resp. start server only if configuration is clean (not skip wrong configured jails if option `-t` specified);
8 years ago
sebres
3e9852d4d2
code review, increase coverage
8 years ago
sebres
4882093a41
test cases extended: cover skipping invalid jail
8 years ago
sebres
e52b47d8f5
normalized log output (all jail parameters in filter are indented with 2 spaces)
8 years ago
sebres
c6e8c700f7
test cases fixed
8 years ago
sebres
77dc5a334c
really skips invalid jails (because of theirs wrong configuration) - server starts nevertheless, as long as one jail was successful configured;
...
message about wrong jail configuration logged in client log (stdout, systemd journal etc.) and in server log as error
8 years ago
sebres
528a7a5abb
systemd service update:
...
- starting service in normal mode (without forking)
- does not restart if service exited normally (exit-code 0, e.g. stopped via fail2ban-client)
- does not restart if service can not start (exit-code 255, e.g. wrong configuration, etc.)
- service can be additionally started/stopped with commands (fail2ban-client, fail2ban-server)
8 years ago
Johannes Weberhofer
f46ada023e
Use Fedora's backend-settings for openSUSE
...
Those settings are ok for newer openSUSE versions
8 years ago
sebres
261f875748
Fixed sporadic tab-replacement (`\n\t` instead of `\n ` by word wrapping) in mime content of smtp-message in test cases, see
...
https://github.com/fail2ban/fail2ban/pull/1410#issuecomment-262000804
8 years ago
Serg G. Brester
44fddc102d
Merge pull request #1616 from sebres/fix-1194
...
[fix-gh-1194] Fixed misleading errors logged from ignorecommand in success case on retcode 1
8 years ago
sebres
701abfd250
ChangeLog entry added
...
+ indentation fix (space-tab replacement)
8 years ago
sebres
c442569b63
executeCmd: added possibility to select success return codes
...
ignorecommand: both return codes (0, 1) are success codes now, so no errors will be logged + test cases extended to check this (and error case)
8 years ago
sebres
189e70d99c
processLine etc. rewritten:
...
- normalize calling parameters (persistent parameters moved from function arguments to filter member variables)
- save last line as lambda instead of return it as string (lazy convert of process line tuple to string on demand, needed in fail2ban-regex only)
8 years ago
sebres
a2cf34a64e
code review: added endpos to found tuple, just to be safe by unpack
8 years ago