4068 Commits (49e237209ef2f76bf834aaa25f6460c953122748)

 

All Branches   

Search

Author	SHA1	Message	Date
sebres	b8c41dcb49	ChangeLog update	8 years ago
sebres	931eab84b5	`filter.d/apache-modsecurity.conf` ... - fixed for newer version (one space, closes gh-1626) reviewed and optimized: - non-greedy catch-all replaced for safer match - unneeded catch-all anchoring removed - non-capturing groups	8 years ago
sebres	c06084d7d9	_start_params - fix: symlinks should be absolute paths	8 years ago
sebres	40cbe96352	Merge remote-tracking branch 0.10 into _0.10/fix-datedetector-grave-fix-v2	8 years ago
Serg G. Brester	389ad10344	Merge pull request #1622 from sebres/_0.10/configreader-and-more ... 0.10/configreader and more: substitution `%(param)s` from init block	8 years ago
Serg G. Brester	b8b5907706	Merge pull request #1624 from sebres/fix-gh-1623 ... filter.d/dovecot.conf update: ignore additionally irrelevant info in anchored regex before "auth failed"	8 years ago
sebres	5678d08a79	filter.d/dovecot.conf update: ... - fixes failregex, that ignores failures through some irrelevant info (closes #1623); - ignores whole additionally irrelevant info in anchored regex before fixed failure data `\((?:auth failed, \d+ attempts( in \d+ secs)?|tried to use (disabled|disallowed) \S+ auth)\)` - review, IPv6 compatibility fix, non-capturing groups	8 years ago
sebres	ce540554c5	Merge configreader-py3-compat branch into _0.10/configreader-and-more	8 years ago
sebres	ec7bb0d6c9	python 3x compatibility fix (positional arguments vs named arguments)	8 years ago
Serg G. Brester	ac1729e473	Merge pull request #1620 from fail2ban/close-gh-1120 ... jail.conf: added `knocking_url` filter-parameter of `pass2allow-ftp`...	8 years ago
sebres	a2af19c9f0	fixed several actions, that could not work with jails using multiple logpath; additionally repaired execution in default shell (bad substitution by `${x//...}` executing in `/bin/sh`); ... added helper "action.d/helpers-common.conf", and `_grep_logs` part-command for actions needed grep logs from multiple log-files test cases: executing of some complex actions covered	8 years ago
sebres	65abc639cc	allow newline in extra init-parameters of action/filter (or interpolation of it), e. g. action[..., logpath="%(logpath)s"]	8 years ago
sebres	097970781c	filter/action (and its includes): substitution `%(param)s` may be used now (instead of `<param>`) for init-values specified in jail-configs via `action[param1="...", param2=...]`; ... substitution `<param>` should be used for dynamic interpolation only (todo: review configurations to replace it);	8 years ago
sebres	b856e1dadc	Merge pull request #1618 from sebres/_0.10/systemd-service	8 years ago
sebres	308bba448c	ChangeLog update	8 years ago
sebres	95dd76b7dd	Merge pull request #1619 from sebres/_0.10/skip-wrong-jails	8 years ago
sebres	d908688b56	ChangeLog update	8 years ago
Serg G. Brester	4f5389fee5	Update jail.conf	8 years ago
sebres	45174c5eaf	if fail2ban running as systemd-service, for logging to the systemd-journal, the `logtarget` could be set to STDOUT ... small fixes by logging in stdout (+ system targets also allowed in lowercase now)	8 years ago
sebres	1cd67ecaa2	automatically creates /var/run/fail2ban before start fail2ban (systems which /var/run/ is virtual resp. memory mount device)	8 years ago
sebres	7256a5cb8e	code review: back to previous code - no skipping in testReadTestJailConf	8 years ago
sebres	8ed5b44bfd	no cover for sporadic executed (time-related) code pieces (just to prevent randomly increasing/decreasing of coverage)	8 years ago
sebres	fdac44ca58	introduced new option `-t` or `--test` to test configuration resp. start server only if configuration is clean (not skip wrong configured jails if option `-t` specified);	8 years ago
sebres	3e9852d4d2	code review, increase coverage	8 years ago
sebres	4882093a41	test cases extended: cover skipping invalid jail	8 years ago
sebres	e52b47d8f5	normalized log output (all jail parameters in filter are indented with 2 spaces)	8 years ago
sebres	c6e8c700f7	test cases fixed	8 years ago
sebres	77dc5a334c	really skips invalid jails (because of theirs wrong configuration) - server starts nevertheless, as long as one jail was successful configured; ... message about wrong jail configuration logged in client log (stdout, systemd journal etc.) and in server log as error	8 years ago
sebres	528a7a5abb	systemd service update: ... - starting service in normal mode (without forking) - does not restart if service exited normally (exit-code 0, e.g. stopped via fail2ban-client) - does not restart if service can not start (exit-code 255, e.g. wrong configuration, etc.) - service can be additionally started/stopped with commands (fail2ban-client, fail2ban-server)	8 years ago
Johannes Weberhofer	f46ada023e	Use Fedora's backend-settings for openSUSE ... Those settings are ok for newer openSUSE versions	8 years ago
sebres	261f875748	Fixed sporadic tab-replacement (`\n\t` instead of `\n ` by word wrapping) in mime content of smtp-message in test cases, see ... https://github.com/fail2ban/fail2ban/pull/1410#issuecomment-262000804	8 years ago
Serg G. Brester	44fddc102d	Merge pull request #1616 from sebres/fix-1194 ... [fix-gh-1194] Fixed misleading errors logged from ignorecommand in success case on retcode 1	8 years ago
sebres	701abfd250	ChangeLog entry added ... + indentation fix (space-tab replacement)	8 years ago
sebres	c442569b63	executeCmd: added possibility to select success return codes ... ignorecommand: both return codes (0, 1) are success codes now, so no errors will be logged + test cases extended to check this (and error case)	8 years ago
sebres	189e70d99c	processLine etc. rewritten: ... - normalize calling parameters (persistent parameters moved from function arguments to filter member variables) - save last line as lambda instead of return it as string (lazy convert of process line tuple to string on demand, needed in fail2ban-regex only)	8 years ago
sebres	a2cf34a64e	code review: added endpos to found tuple, just to be safe by unpack	8 years ago
sebres	b5433f48b7	amend after code review of merge gh-1581	8 years ago
sebres	bee6e7376b	Merge branch 'aclindsa:master'	8 years ago
sebres	ea4c1f6356	Merge branch 'master' into 0.10	8 years ago
sebres	dab5f56609	Merge branch 'fix-gh-1477'	8 years ago
Alex	8ac28e5dcb	Make changes and add test file	8 years ago
Alex	8c40766511	Add Mongodb-auth filter and jail	8 years ago
Serg G. Brester	4e252be76f	Update FILTERS ... closes #1591	8 years ago
sebres	58717c1854	fail2ban-testcases: persistently set (python) time zone to CET during test cases process (used in zone-related test-cases)	8 years ago
sebres	c8b036456d	changelog entries	8 years ago
sebres	ffa9705412	fixed UTC/GMT named time zone using `%Z` and `%z` patterns (special case with 0 zone offset); ... Currently still ignores another named zones, because fail2ban assumes that the given date is in the current default zone. Closes gh-1575	8 years ago
sebres	faee5f1fdc	better caching (thereby better performance), better recognition of similar regex	8 years ago
sebres	ae7297e16b	more precise date template handling (WARNING: this commit creates possible incompatibilities): ... - datedetector rewritten more strict as earlier; - default templates can be specified exacter using prefix/suffix syntax (via `datepattern`); - more as one date pattern can be specified using option `datepattern` now (new-line separated); - some default options like `datepattern` can be specified directly in section `[Definition]`, that avoids contrary usage of unnecessarily `[Init]` section, because of performance (each extra section costs time); - option `datepattern` can be specified in jail also (jails without filters); - if first group specified, only this will be cut out from search log-line (e. g.: `^date:[({DATE})]` will cut out only datetime match pattern, and leaves `date:[] failure ip...` for searching in filter); - faster match and fewer searching of appropriate templates (DateDetector.matchTime calls rarer DateTemplate.matchDate now); - standard filters extended with exact prefixed or anchored date templates; template cache introduced (in opposition to default template cache, holds custom templates cached by pattern for possible common usage of same template/regex);	8 years ago
sebres	bd1eb70c52	speedup template first time selection through pre-sorted template list by template hits	8 years ago
sebres	0bed91b3c2	speedup SeekToTime test cases using exact date pattern...	8 years ago