Commit Graph

5758 Commits (3d4bed50c2db1500365e80758c7a392b1f0ffd48)
 

Author SHA1 Message Date
Sergey G. Brester 3d4bed50c2
changelog entry (gh-3479)
2 years ago
Sergey G. Brester c7f8b75e7e
action.d/cloudflare-token.conf: fixes #3479, url-encode args by unban
2 years ago
Sergey G. Brester 234660e94d
CI-workflow: remove 3.5 (seems to have a bug in GHA now)
2 years ago
Sergey G. Brester 17f060526e
readme: amend
2 years ago
Sergey G. Brester 92fae68071
readme: update version
2 years ago
Sergey G. Brester 06e3dea062
Merge pull request #3460 from Trotyl84/patch-1
2 years ago
Łukasz Turon 5dcbc0dd55
Update .gitignore
2 years ago
sebres f93a538693 gh-3447: fix careless mistake arisen in b12a3acb06 by attempt to implement new reload capacity (rewritten latter): causing error "'noduplicates' is not defined" by double jail configuration
2 years ago
sebres a3a3fffa54 Merge branch 'fix-gh-3438':
2 years ago
sebres ed135b6a93 changelog entries (gh-3438, gh-3132)
2 years ago
sebres 582436aadf don't add subnets to local addresses of `ignoreself` from network interfaces, use only IPs instead (subnets may be too heavy and not wanted, todo: make it configurable later)
2 years ago
sebres cb8674e68a amend with few improvements, IPv6IsAllowed prefers IPs from network interfaces (if available for platform) and uses DNS (socket.getaddrinfo) as a fallback only
2 years ago
sebres 09c23fd5b8 try to obtain local addresses from network interfaces before DNS to IP lookup (closes gh-3132);
2 years ago
sebres d8a9812adc improve auto detection of IPv6 - try to check sysctl net.ipv6.conf.all.disable_ipv6 (prefer value read from `/proc/sys/net/ipv6/conf/all/disable_ipv6`)
2 years ago
sebres 58834b6734 better auto-detection for IPv6 support (`allowipv6 = auto` by default); circumvent SF in some python's socket module by getaddrinfo with disabled IPv6 (closes gh-3438)
2 years ago
Sergey G. Brester 432e7e1e93
no warning if no config value but default (debug message now)
2 years ago
Sergey G. Brester bd6e7aeff0
Merge pull request #2112 from al42and/dante
2 years ago
Sergey G. Brester efbbcb41ea
non capturing group
2 years ago
Sergey G. Brester 996553f330
review, simplify regex and capture user name
2 years ago
Andrey Alekseenko df91b047d2 Dante SOCKS server: handle "1 byte/second" case
2 years ago
Andrey Alekseenko 05c162ef10 Create filter for Dante SOCKS server
2 years ago
Sergey G. Brester ae5fe2e003
amend to #3405, eliminate catch-all
2 years ago
sebres 36af3f2502 Merge branch 'gh-3405'
2 years ago
sebres a58fcb8786 fix cut out of match for pattern with `{EPOCH}` (similar to other datepatterns group capturing whole regex only added if no groups specified at all);
2 years ago
sebres cbb097a2b3 small amend (non capturing group)
2 years ago
sebres 82506f0586 filter.d/selinux-ssh.conf, filter.d/selinux-common.conf: fixes #3405 (new format with GS and additional parameters, e. g. grantors)
2 years ago
sebres eba33d6205 version bump
2 years ago
sebres e1d3006b03 update 1.0.2 -- finally-war-game-test-tape-not-a-nuclear-alarm
2 years ago
sebres fd3805b40a changelog: backend `systemd`: code review and several fixes
2 years ago
sebres cd17906afe Merge branch '0.11'
2 years ago
sebres d8e2b03a24 `filter.d/named-refused.conf` extended (closes gh-3388):
2 years ago
sebres 6d19d2e800 Merge branch '0.10' into 0.11
2 years ago
sebres 04c252c34b filtersystemd: code review, wait only if it is necessary - in operational mode and if no more entries retrieved (end of journal);
2 years ago
sebres ca2b94c522 fixes gh-3370: resolve extremely long search by repeated apply of non-greedy RE `(?:: (?:[^\(]+|\w+\([^\)]*\))+)?` with following branches (it may be extremely slow up to infinite search depending on message); added new regression tests
2 years ago
sebres fc7dbcc6a7 test-suite: avoid mistaken match that confuses output with working on line message by deep debugging of test (e. g. with `-l 4`)
2 years ago
sebres f8fcaf943b version bump
2 years ago
sebres 677da51562 release 1.0.1 -- energy-equals-mass-times-the-speed-of-light-squared
2 years ago
sebres bd94b7a47d make up leeway of ChangeLog (prepare release of 1.0)
2 years ago
sebres 2df58c5281 close fork
2 years ago
sebres 7bd4f41171 Merge branch '0.11'
2 years ago
sebres 94dac78afe Merge branch '0.10' into 0.11
2 years ago
sebres 485c50228a explicitly close cursor if not needed anymore (GC can grab it late)
2 years ago
sebres 45ef36276f fixes gh-3352: failed update of database didn't signal with an error
2 years ago
Jeff Johnson f9f78ed9d2
IPThreat integration (#3349)
2 years ago
sebres 934e1b606d Merge branch '0.11'
2 years ago
sebres 8dccf099e4 Merge branch '0.10' into 0.11
2 years ago
sebres 5e74499ffd provides details of failed regex compilation in the error message we throw in Regex-constructor (it's good to know what exactly is wrong)
2 years ago
sebres d6896eb26d New logtarget: systemd-journal;
2 years ago
sebres a08b925468 Merge branch '0.11'
2 years ago
sebres 467024797f Merge branch '0.10' into 0.11
2 years ago