Mark McKinstry
dd9ee4c39a
quotes around the comment put in apf's deny_hosts.rules file
2013-09-25 17:51:25 -04:00
Mark McKinstry
e64493c328
use human readable/longer options when banning and un-banning IPs with apf
2013-09-25 16:44:10 -04:00
Mark McKinstry
c692912a82
don't hardcode absolute path for apf firewall
2013-09-25 16:38:45 -04:00
Mark McKinstry
66aff43d68
remove un-needed '$' line
2013-09-25 16:37:58 -04:00
Steven Hiscocks
011ccbc675
TST+BF: Fix bug in Filter.{get,set}DatePattern and improve tests
2013-09-24 22:25:17 +01:00
Steven Hiscocks
9c61adcad7
ENH+DOC: Allow setting of Epoch and TAI64N date pattern
...
Also add this to jail.conf man page
2013-09-24 22:11:04 +01:00
Daniel Black
05b4d2ce5b
BF: -D to deconflict with datedetector
2013-09-24 08:35:12 +10:00
Steven Hiscocks
e07df3f7d4
ENH: fail2ban-regex uses ISO8601 when using journal backend
...
Also fix setting of date pattern occurring too early, before filter
being created.
2013-09-22 18:14:04 +01:00
Steven Hiscocks
badf9d03b9
ENH: Allow setting of ISO8601 via datepattern (default for systemd)
2013-09-22 18:12:16 +01:00
Daniel Black
b3cd5ca807
BF: correct scope for datetime.now
2013-09-22 21:51:51 +10:00
Daniel Black
ca496f6d41
DOC: corrections and enhancements on DEVELOP
2013-09-22 16:23:04 +10:00
Daniel Black
8109467459
BF: use string replace rather than re.sub
2013-09-22 15:49:30 +10:00
Daniel Black
4b5ecbccd1
ENH: debuggex URLs with fail2ban-regex
2013-09-22 13:20:17 +10:00
Daniel Black
37de5462be
ENH: iso8601 - remove default_timezone set to UTC, isn't valid any more - calculate from local timezone. Enforce T date/time separator in iso8601 regex. Make minutes in timezone optional as per ISO8601. Use consistant regex for ISO8601
2013-09-21 11:47:24 +10:00
Daniel Black
a0676cdd1e
ENH: add date format 2005-01-23 21:59:59 (%Y-%m-%d %H:%M:%S) so ISO8601 doesnt handle it
2013-09-21 11:44:50 +10:00
Daniel Black
855d802ba8
ENH: more detail in debug messages in date/time detection
2013-09-21 10:31:26 +10:00
Daniel Black
0035c99d07
BF: remove unused function DateDetector.getUnixTime
2013-09-21 10:22:15 +10:00
Daniel Black
ec0670f6d5
BF: fix MyTime imports
2013-09-21 09:44:24 +10:00
Daniel Black
33aee14fcc
DOC: comment examples of date formats
2013-09-21 09:16:31 +10:00
Daniel Black
cfd9778f3c
TST: fix unicode on test strings
2013-09-20 21:43:27 +10:00
Daniel Black
d9f0438a8d
MRG: remerge in %z and %f datetime format
2013-09-20 21:18:44 +10:00
Daniel Black
0f283f8b6f
BF: wrong variable name in previous merge
2013-09-20 21:16:39 +10:00
Daniel Black
9805d39b60
MRG: merge date changes to support timezones
2013-09-20 18:22:32 +10:00
Daniel Black
8c2a5612ed
DOC: resolve ChangeLog conflicts
2013-09-19 19:38:28 +10:00
Daniel Black
2a805452c6
DOC: resolve ChangeLog conflicts
2013-09-19 19:28:39 +10:00
Daniel Black
8e9fab9b3c
Merge branch 'master' of https://github.com/fail2ban/fail2ban
2013-09-19 19:25:47 +10:00
Daniel Black
3be7dcd701
DOC: resolve ChangeLog conflicts
2013-09-19 19:23:02 +10:00
Daniel Black
2562b2f1bc
DOC: used spellchecker finally. Debuggex needs promotion more than donations
2013-09-19 19:18:04 +10:00
Daniel Black
3fac971a5a
DOC: more info on developing filters
2013-09-19 13:10:21 +10:00
Daniel Black
89e0520675
ENH: dovecot regex to match failure reported by Bob Cohen on mailing list
2013-09-19 08:25:50 +10:00
Yaroslav Halchenko
c046479f2a
Merge pull request #360 from grooverdan/proftpd
...
BF: fix daemon name typo for filter proftpd
2013-09-18 08:06:14 -07:00
Daniel Black
c3ee03b9ba
BF: fix daemon name typo for filter proftpd
2013-09-18 07:32:26 +10:00
Daniel Black
39ca8837eb
TST: pureftpd - syslog therefore use syslog prefixes in filter
2013-09-17 22:24:56 +10:00
Daniel Black
9ce1e33313
TST: pureftpd - everything I've seen suggests that pureftpd only does syslog - even back to 2004. Not sure how this second example came into existance
2013-09-17 22:24:28 +10:00
Daniel Black
ad5fb81f4b
TST: failJSON set match to false on longer supported pam version
2013-09-17 21:18:24 +10:00
Yaroslav Halchenko
596abde712
Merge pull request #352 from grooverdan/recidive
...
ENH: filter.d/recidive - anchor regex at start and support f2b SYSLOG target
2013-09-16 19:51:42 -07:00
Daniel Black
bec723b21d
TST: failJSON date fix
2013-09-17 10:51:48 +10:00
Daniel Black
30bb1a77a3
ENH: added syslog prefix to pam-generic filter. Disable regex match for pre 2006 (< 0.99.2.0) versions on linux-pam
2013-09-17 10:50:46 +10:00
Daniel Black
7e756dfada
TST: correct failJSON for www3.google.com -> www.google.com changes. Disable test case for pre-0.99.2.0 version of linux-pam failure messages
2013-09-17 10:48:09 +10:00
Daniel Black
8f41422262
TST: domains need to exist for fail2ban-regex to work
2013-09-17 10:09:19 +10:00
Daniel Black
ee497ff1cb
ENH: filter mysqld-auth can be a is a syslog based service so anchor it using syslog prefix
2013-09-17 07:57:19 +10:00
Daniel Black
13ec9d58c0
ENH: filter gssftpd is a syslog based service so anchor it using syslog prefix
2013-09-17 07:25:23 +10:00
Yaroslav Halchenko
bb32295b50
DOC: minor - untabified few entries in the ChangeLog
2013-09-16 09:49:24 -04:00
Daniel Black
50a6289f03
BF: handle 2.4 and %f in strftime
2013-09-16 18:50:19 +10:00
Daniel Black
673cc4d77f
ENH: anchor at end of recidive filter
2013-09-16 18:43:56 +10:00
Yaroslav Halchenko
38b07ca46e
BF: catch and report exceptions while executing commands in client interactive mode ( Close #353 )
2013-09-15 23:05:32 -04:00
Daniel Black
504111b0b1
ENH: filter.d/recidive - anchor regex at start and support f2b SYSLOG target
2013-09-16 01:22:42 +10:00
Daniel Black
2cefce5ee0
TST: testDateDetectorTemplateOverlap fix for python-2.5 without %f in strftime
2013-09-16 00:09:41 +10:00
Daniel Black
d8f73c0205
ENH: full timezone support
...
ISO8601 and %z based timezones now fully supported.
Restructured so log lines are also only parsed once and return
a unixtime and a pattern match.
Fix all test cases to adjust for the change in return value.
2013-09-15 23:44:30 +10:00
Daniel Black
422e2527c4
TST: correct failData - faildata in UTC+1 not UTC
2013-09-15 23:42:38 +10:00