Commit Graph

5801 Commits (48c91dfb6bd8478968c226d0c6ca965bdce2768d)

Author SHA1 Message Date
Sergey G. Brester bcac47d549
Merge pull request #3324 from fail2ban/patch-sendmail-no-user-part
filter.d/sendmail-auth.conf: detect failures without user part
2022-08-01 09:40:12 +02:00
Sergey G. Brester 514cca9ade
filter.d/sendmail-auth.conf: detect failures without user part 2022-08-01 09:20:28 +02:00
Sergey G. Brester 3a8ab0c70a
sendmail-auth: coverage for auth-failure without user part
https://github.com/fail2ban/fail2ban/issues/2757#issuecomment-1199948639
2022-08-01 09:17:53 +02:00
sebres 3c22ae161c Merge branch '0.11' 2022-06-21 17:17:19 +02:00
sebres c6cfd761bb Merge remote-tracking branch 'remotes/gh-upstream/0.10' into 0.11 2022-06-21 17:16:03 +02:00
Sergey G. Brester 7ba8f437f1
Merge pull request #3267 from fail2ban/py-3.11-a7
support python 3.11 version
2022-06-21 17:14:26 +02:00
sebres 5d9d86e2f4 GHA: update python 3.11 version (3.11.0-beta.3) 2022-06-21 17:10:48 +02:00
sebres 15f5c36a17 skip test if readline module missing (add it as optional module installs in GHA workflow) 2022-06-21 17:05:39 +02:00
sebres 4337e36616 wrap global flags like ((?i)xxx) or (?:(?i)xxx) to local flags (?i:xxx) if supported by RE-engine in the python version 2022-06-21 16:56:57 +02:00
sebres 7e2ab36d86 move global groups to start of expression (python 3.11 compat) 2022-06-21 16:55:57 +02:00
Sergey G. Brester 500895dcfa GHA: update python 3.11 version 2022-06-21 15:34:58 +02:00
Sergey G. Brester a2264dcef0
Merge pull request #2636 from brianjmurrell/patch-2
FreeIPA renames named to named-pkcs11
2022-06-21 14:19:16 +02:00
Sergey G. Brester 3e9321e71b
non-capturing group and any variant of suffix 2022-06-21 14:15:38 +02:00
Sergey G. Brester a7ade07bf4
fixes typo (copy&paste) by logging of flush impossibility at consistency check, #3306 2022-06-19 23:06:42 +02:00
Sergey G. Brester 72a32d5c18
Merge pull request #3304 from koratfood/patch-1
Fix typo in fail2ban-client manpage
2022-06-13 12:23:50 +02:00
koratfood e3d8b041a2
Fix typo in fail2ban-client manpage
Fix minor typographical error.
2022-06-10 09:52:00 +02:00
sebres 9272cce13d Merge branch '0.11' 2022-06-02 21:06:12 +02:00
sebres a69d42cea5 Merge branch '0.10' into 0.11 2022-06-02 21:04:43 +02:00
sebres 5aeb49a620 systemd backend: fixes missing space in message (tag `<matches>`) between timestamp and host if the message read from systemd journal;
closes gh-3293
2022-06-02 21:01:44 +02:00
Sergey G. Brester fbfc85d8c0
common.conf: fixed typo in comment (rfc5424 for logtype)
no functional changes; closes #3274
2022-05-12 18:09:09 +02:00
Logic-32 d11ad3b90f Adding jail name to notes to disambiguate between jails. 2022-05-07 20:52:39 -06:00
Logic-32 e89b2c0ff7 Moving inet6 family block to the end so other config doesn't get added to it. 2022-05-07 20:41:33 -06:00
Logic-32 7e7b9f4a35 Adding support for Cloudflare Token API.
Closes #3080
2022-04-27 14:19:18 -06:00
sebres f81f85569d Merge branch '0.11' 2022-03-03 15:18:11 +01:00
sebres 8c4d02403b Merge branch '0.10' into 0.11 2022-03-03 15:15:43 +01:00
sebres e2d50f38a6 amend to #2279: ensure that `<F-MLFGAINED>` match would reset all pending multi-line failures 2022-03-03 15:04:34 +01:00
sebres 7eac4ac06f fail2ban-regex: accepts filter parameters with new-line 2022-03-03 14:46:16 +01:00
sebres 3a9f5c0b5d Revert "highlighting got broken, so comment out unless GH/linguist gets fixed"
This reverts commit 1e5d5a446a.
2022-02-22 18:19:44 +01:00
Sergey G. Brester 03bcfa24ca
Merge pull request #3230 from szepeviktor/patch-9
Render Changelog as Markdown
2022-02-22 12:04:05 +01:00
Viktor Szépe 45e08cc07f
Render Changelog as Markdown 2022-02-21 18:29:04 +00:00
Sergey G. Brester 8e62c8a569
syntax 2022-02-21 17:02:24 +01:00
Sergey G. Brester 1e5d5a446a
highlighting got broken, so comment out unless GH/linguist gets fixed
revert #3126
2022-02-21 16:59:38 +01:00
sebres bc075ea682 Merge branch 'differentiate-ip-fid--gh-3217' 2022-02-18 20:22:28 +01:00
sebres b903059419 ChangeLog for RFE gh-3217 (with compat warning) 2022-02-18 20:19:43 +01:00
sebres 8eb521694e fulfill getIP with getID replacement; added simple tests for ticket 2022-02-11 21:25:31 +01:00
sebres cf2695a253 more test cases (coverage for fail2ban-regex on constellations with different IP/ID) 2022-02-11 21:13:30 +01:00
sebres c6e93db278 filter reader stream: don't need to generate None values from filter config 2022-02-11 21:12:59 +01:00
sebres b83712e3ec fail2ban-regex: accepts filter parameters with new-line 2022-02-11 21:11:29 +01:00
sebres 96121830da differentiate <ip> and <fid> (<F-ID>): if IP-address deviates from ID then `<ip>` is not `<fid>` anymore;
introduces certain backwards incompatibility against actions that have used tag `<ip>` to get failure-ID, if IP-related tags (like `<ADDR>` or `<HOST>`) used additionally to `<F-ID>` and they are different, see gh-3217
2022-02-11 19:10:26 +01:00
Sergey G. Brester 246d0e1100
Merge pull request #3216 from jerrykan/fix_missing_assert
Add missing assert in Fail2banRegexTest.testFrmtOutput
2022-02-11 18:28:37 +01:00
John Kristensen d17e61ed5b Add missing assert in Fail2banRegexTest.testFrmtOutput
There was no associated `assertLogged()` for the "multiple id combined
to a tuple" test so nothing was actually being tested.
2022-02-11 17:38:58 +11:00
sebres 8b11c89ed4 amend to drop support of python 2.6 2022-02-10 17:04:47 +01:00
sebres ff7fe572bf drop support for python 2.6 (hardly possible in modern CIs, new features would expect OrderedDicts, etc) 2022-02-10 15:48:51 +01:00
Sergey G. Brester 5bfd9992b4
Update FUNDING.yml 2022-02-09 17:50:35 +01:00
Sergey G. Brester a98c4218c1
Create FUNDING.yml 2022-02-09 17:34:51 +01:00
sebres a2431158f6 implements new interpolation variable `%(fail2ban_confpath)s` (automatically substituted from config-reader path, default `/etc/fail2ban` or `/usr/local/etc/fail2ban` depending on distribution); `ignorecommands_dir` is unneeded anymore, thus removed from `paths-common.conf`;
fixes gh-3005
2022-02-09 17:10:19 +01:00
sebres 13520a0494 Merge branch '0.11' 2022-02-09 15:45:17 +01:00
sebres 8ac49b5858 Merge branch '0.10' into 0.11 2022-02-09 15:44:35 +01:00
László Károlyi f380d6202d cherry pick #3210 from master 2022-02-09 15:43:21 +01:00
sebres cdb6a46945 systemd backend: better avoidance of landing in dead space by seeks over journals;
increase verbosity and stability of few systemd tests (fixes sporadic timing issues);
seekToTime doesn't need to convert float to datetime, because seek_realtime accepts it as unix time (we need to convert integers only, since it means microseconds and deprecated);
2022-02-09 14:47:40 +01:00