4492 Commits (4129f940bbd86064f0a6cbf66c08c5db4e34c8c5)

 

All Branches   

Search

Author	SHA1	Message	Date
sebres	4129f940bb	revert non-empty incremental multi-line failure merge (just simply overwrite method used ATM); ... revert sshd test case (better to use last given failure-id, so ipv6 instead ipv4, e. g. because of some wrong multi-line-id recognition); improved output on AssertionError in samples-testcase factory.	7 years ago
sebres	25cc42129a	hold all user names affected by interim attempts in order to avoid forget a failures after success login: ... intruder (as legitimate user) firstly tries to login with another user-name (brute-force), so hopes to reset failure counter by succeeded login; this is fixed and covered in tests now; sshd-filter extended to cover multiple-login attempts (also fully implements gh-2070);	7 years ago
sebres	a9c94686b6	fixed multiple regexs matched	7 years ago
sebres	5603055a58	failregex: introduced capturing alternate groups, for example non-empty values of `alt_user_1`, `alt_user_2` will overwrite `user` if it is empty (or `alt_host` -> `host`, etc.)	7 years ago
sebres	8028d3940d	amend with better match of optional suffix-groups; ... remove end-anchors for expressions are precise enough (with clear flow, simple branches, without catch-all's, etc.);	7 years ago
sebres	66d2436f21	filter.d/sshd.conf: extend suffix with optional port, move it to `prefregex` at end outside of the content	7 years ago
Sergey G. Brester	20fffc44c1	Merge pull request #2087 from sebres/fix-recidive-by-syslog ... filter.d/recidive.conf: fixed if logging into systemd-journal (SYSLOG)	7 years ago
sebres	a6fb33bdec	filter.d/recidive.conf: fixed if logging into systemd-journal (SYSLOG) with daemon name in prefix, gh-2069	7 years ago
sebres	2e533a3a3a	better handling of default date templates (bounds, replacement using own expressions `...{DATE}...`, etc.)	7 years ago
sebres	ce6ca0029a	minimize log output in trace case (index instead of full-regexp by "matched" log-line)	7 years ago
sebres	a3739bbf27	trim name and add one space after padding	7 years ago
sebres	71b19d9eba	stability of time-related test-cases: a bit increased timeouts; code normalization, review and coverage	7 years ago
Sergey G. Brester	92f19d0604	Merge pull request #2067 from fail2ban/sebres-fix-hostdeny-ipv6 ... action.d/hostdeny.conf: fixes IPv6 syntax	7 years ago
sebres	5b63ad17c6	stability of the test-cases: avoid echoing of server-ready in configure thread, if heavy-debug (only answer from new internal command "server-status").	7 years ago
Sergey G. Brester	b16aafe233	Update ChangeLog	7 years ago
Sergey G. Brester	b34ae5999e	action.d/hostdeny.conf: fixes IPv6 syntax ... differentiate the IPv4 and IPv6 syntax (where it is enclosed in square brackets)	7 years ago
sebres	cfc3979c84	Merge branch '0.10' with 'socket-stability-fix'	7 years ago
sebres	1bdda6c8eb	cache coverage	7 years ago
sebres	96836cb199	fix several errors (shutdown in test-cases during stop communication, better error handling by unpickle/deserialization, etc)	7 years ago
sebres	29bedd70d5	socket stability and coverage: cherry picked from 0.11 version (avoid many sporadic unhandled exceptions)	7 years ago
Sergey G. Brester	9f969e7aab	Merge pull request #2062 from MatthieuBarbu/patch-2 ... filter.d/sshd.conf: fixed normal and ddos-mode regex (extended with port)	7 years ago
sebres	caa2bdfee6	amendment for gh-2061: it looks like the port was added here also	7 years ago
sebres	a3bcbe2d1b	backwards-compatibility, test-cases and ChangeLog update	7 years ago
MatthieuBarbu	6b5516b851	fix sshd rule #2 ... in line 58, rule don't match with "%(__suff)s" but work fine if I replace with "%(__on_port_opt)s" Debian 9 stretch : fail2ban 0.10.3	7 years ago
Sergey G. Brester	e9a43f739c	Merge pull request #2061 from MatthieuBarbu/patch-1 ... fix sshd rule (space before "11:" is optional now)	7 years ago
sebres	1d7aa2ff21	filter.d/sshd.conf: rewrite fix (for new ssh log-format) backwards compatible + test-cases extended to cover both cases	7 years ago
MatthieuBarbu	9f5c873526	fix sshd rule ... just remove the space before ":11" line 52 because don't match on my Debian 9 stretch... I don't know if this is wrong on all OS	7 years ago
sebres	5f021aa648	shutdown sockets before close, avoid socket leakage by use of the explicit socket close in async_chat; ... better error handling with error counting, differentiate special case ([Errno 24] Too many open files), with resulting stop of the server (avoid flood the log file, closes gh-991 and similar issues); restored auto-garbage, because of non-reference-counting python's (like pypy), otherwise it may leak there on objects like unix-socket, etc.	7 years ago
sebres	fa520f36c3	stability test-cases fix: avoid rare sporadic error on start of server (threaded in foreground); ... additionally show the log output of the thread-server in case of any error there.	7 years ago
sebres	8c291cad38	filter.d/asterisk.conf: fixed failregex prefix by log over remote syslog server (gh-2060)	7 years ago
Ben RUBSON	b112250ef0	(Free)BSD IPFW does not allow 2 identical rules (#2054) ... ipfw actionban fixed to allow same rule added several times (and actionunban to ignore error by deletion of missing rule)	7 years ago
Ben RUBSON	857767f04b	Add 'any' badips.py bancategory (#2056) ... action.d/badips.py: allow `any` as bancategory to retrieve IPs from all categories	7 years ago
sebres	07fcb24ff6	Merge pull request #2057 from benrubson/https ... Use httpS with badips	7 years ago
Sergey G. Brester	117dcca414	Merge pull request #2059 from benrubson/str ... badips.py, solve a str() issue - expected string, IPAddr found	7 years ago
sebres	933670d034	pragma: no cover - availability (once after error case only)	7 years ago
sebres	f52c67238a	action.d/badips.py: code review, ban command covered, debug log-messages, etc;	7 years ago
sebres	095a909c84	action.d/badips.py: increases score in test-cases (5 now, ssh/3 returns to large list, which can cause timeout if badips server to busy);	7 years ago
benrubson	8ed892b8bb	Changelog	7 years ago
benrubson	fce2a50165	badips.py, solve a str() issue under FreeBSD	7 years ago
benrubson	9a8add0ef0	changelog	7 years ago
benrubson	e2665d39fd	Use httpS with badips	7 years ago
Sergey G. Brester	7070664772	Merge pull request #2048 from sebres/exim-too-many-errors ... Exim-filter: too many errors	7 years ago
Sergey G. Brester	879f580c9a	Update ChangeLog	7 years ago
sebres	e636567d23	filter.d/exim.conf: failregex extended with SMTP call dropped: too many syntax or protocol errors.	7 years ago
sebres	19a5a2f8c0	filter.d/murmur.conf: fixed detection of failures reading from journal (systemd-backend only): ... - extended with optional prefix for the systemd-journal (with second date-pattern as optional match); - added `journalmatch` filtering; closes gh-2043	7 years ago
sebres	3e15343343	fail2ban-regex: bug fixed, if running over systemd-journal and `journalmatch` missing in filter.	7 years ago
sebres	98f4d70371	fixed cymru-info resolved to answers with multiple data-records (as comma-separated list now)	7 years ago
Sergey G. Brester	3b8b9c4acf	README: extended systemd-prerequirements: python-systemd package	7 years ago
sebres	f1661d35ea	fix sporadic error, wait for shutdown/exit messages by assert-check, better prevention of dual (parallel) stop	7 years ago
sebres	2c03f5ad28	simple syntax change (wrong escape in string): no functional changes	7 years ago