Yaroslav Halchenko
4a1fd888f0
Carry on development
8 years ago
Yaroslav Halchenko
3605155978
updated man pages
8 years ago
Yaroslav Halchenko
482252dbd4
ENH: prep for 0.9.6 release (as of tomorrow)
8 years ago
Yaroslav Halchenko
e550850b9c
BF: added missing entires into MANIFEST
8 years ago
Serg G. Brester
556a9373ce
Update ChangeLog
8 years ago
sebres
45f1d811c9
Merge branch 'alex1702-1586'
8 years ago
sebres
67c14afd8e
ChangeLog entry added + jail.conf review
8 years ago
sebres
425170cef3
code review, makes the test cases workable, added dev-notes
8 years ago
Serg G. Brester
f827675822
Merge pull request #1627 from sebres/fix-gh-1626
...
Fix gh-1626: one space after ModSecurity
8 years ago
sebres
b8c41dcb49
ChangeLog update
8 years ago
sebres
931eab84b5
`filter.d/apache-modsecurity.conf`
...
- fixed for newer version (one space, closes gh-1626)
reviewed and optimized:
- non-greedy catch-all replaced for safer match
- unneeded catch-all anchoring removed
- non-capturing groups
8 years ago
Serg G. Brester
b8b5907706
Merge pull request #1624 from sebres/fix-gh-1623
...
filter.d/dovecot.conf update: ignore additionally irrelevant info in anchored regex before "auth failed"
8 years ago
sebres
5678d08a79
filter.d/dovecot.conf update:
...
- fixes failregex, that ignores failures through some irrelevant info (closes #1623 );
- ignores whole additionally irrelevant info in anchored regex before fixed failure data `\((?:auth failed, \d+ attempts( in \d+ secs)?|tried to use (disabled|disallowed) \S+ auth)\)`
- review, IPv6 compatibility fix, non-capturing groups
8 years ago
Serg G. Brester
ac1729e473
Merge pull request #1620 from fail2ban/close-gh-1120
...
jail.conf: added `knocking_url` filter-parameter of `pass2allow-ftp`...
8 years ago
Serg G. Brester
4f5389fee5
Update jail.conf
8 years ago
Johannes Weberhofer
f46ada023e
Use Fedora's backend-settings for openSUSE
...
Those settings are ok for newer openSUSE versions
8 years ago
sebres
b5433f48b7
amend after code review of merge gh-1581
8 years ago
sebres
bee6e7376b
Merge branch 'aclindsa:master'
8 years ago
sebres
dab5f56609
Merge branch 'fix-gh-1477'
8 years ago
Alex
8ac28e5dcb
Make changes and add test file
8 years ago
Alex
8c40766511
Add Mongodb-auth filter and jail
8 years ago
Serg G. Brester
4e252be76f
Update FILTERS
...
closes #1591
8 years ago
Aaron Lindsay
7805f9972d
filter.d/sshd.conf: Match 'Invalid user' with 'port \d*'
8 years ago
Yaroslav Halchenko
5502e47486
Merge pull request #1579 from sebres/fix-gh-1578
...
filter.d/sendmail-reject.conf: double space (should be by missing dns-host only)
8 years ago
sebres
519e355bf2
ChangeLog entry added
8 years ago
sebres
84c3eb3e0e
filter.d/sendmail-reject.conf: double space (should be by missing dns-host only)
...
Closes #1578
8 years ago
sebres
15dc2db8bb
Merge pull request #1498 from ahpnils:npf to master:
...
This new action files adds support for the NPF packet filter, available on NetBSD since version 6.0.
Closes #1498
8 years ago
Nils
f7df6026a3
Update Changelog to reflect the new np.conf action
8 years ago
Nils
d08db22b92
Create npf.conf for the NPF packet filter
...
This file adds support for the NPF packet filter, available on NetBSD since version 6.0
8 years ago
Serg G. Brester
8e3e333d54
Update ChangeLog
8 years ago
Serg G. Brester
d9e1a4f547
Merge pull request #1556 from szepeviktor/master
...
Monit config: scripting is not supported in path
8 years ago
Viktor Szépe
a406c6eb3a
By the author:
...
> Yes, scripting is not supported in path.
https://bitbucket.org/tildeslash/monit/issues/372/webadmin-shows-only-the-first-part-of#comment-27946048
8 years ago
Serg G. Brester
28e286cd2d
Merge pull request #1551 from fail2ban/sebres-patch-fips-gh-1540
...
filter.py: FIPS compliant fix (use sha1 instead of md5 if not allowed)
8 years ago
sebres
0f1d1a0d4d
ChangeLog: FIPS compliant
8 years ago
Serg G. Brester
1071db2256
filter.py: easy-fix to use sha1 instead of md5 if its usage prohibited by some systems following strict standards (like FIPS)
...
closes gh-1540
8 years ago
Serg G. Brester
fad953ade6
Merge pull request #1544 from sebres/fix/vsftpd-gh-1543
...
filter.d/vsftpd.conf: optional reason part in message after FAIL LOGIN
8 years ago
sebres
9fb167b5e1
filter.d/vsftpd.conf: optional reason message after FAIL LOGIN, closes #1543
8 years ago
sebres
7ac9890bf6
forgotten obsolete code removed
8 years ago
sebres
51fd9a1027
amend to activate performance-fix (respect findtime before search of match) + code coverage
8 years ago
sebres
57458a462e
allow to set default or preferred encoding for other filters (e.g. to decode bytes from journal)
...
# Conflicts:
# fail2ban/server/filter.py
8 years ago
sebres
3119f81705
fixed journal systemd ascii/utf-8 default converting (see gh-1341, gh-1344)
8 years ago
Yaroslav Halchenko
f6258c7b69
Merge branch 'rf-exc'
...
* rf-exc:
RF: Replace old fashioned "except E , e" with "except E as e" (Closes #1537 )
8 years ago
Yaroslav Halchenko
b875e51cd7
RF: Replace old fashioned "except E , e" with "except E as e" ( Closes #1537 )
8 years ago
sebres
564b696530
Merge branch '_0.9/systemd-journal-path-gh-1408'
8 years ago
sebres
5f35b52b9a
test cases extended
...
several test-case functionality cherry picked from 0.10 (SkipTest, with_tmpdir)
8 years ago
sebres
35b5fea038
backend "systemd" can be used as prefix now - `backend = systemd[...]`
8 years ago
sebres
7ed6cab120
jail configuration extended with new syntax to pass options to the backend (see gh-1408),
...
examples:
- `backend = systemd[journalpath=/run/log/journal/machine-1]`
- `backend = systemd[journalfiles="/run/log/journal/machine-1/system.journal, /run/log/journal/machine-1/user.journal"]`
- `backend = systemd[journalflags=2]`
8 years ago
sebres
1c4733ef89
[systemd] added new constructor parameters like journalpath, journalfiles and journalflags for systemd backup
...
optimized FilterSystemd method `run`: better wait in idle (no busy-loop), better poll handling, the ban will executed anywhere (at least at 100th log-entry), also if we have never ending logging in this jail (e.g. extremely logging or too many failures)
systemd test cases extended
8 years ago
Serg G. Brester
0ab042fcce
Merge pull request #1522 from sebres/fix-asterisk-log-prefix
...
filter.d/asterisk.conf: another part ` chan_sip.c:28468 handle_request_register:` (without `in`) in log prefix
8 years ago
sebres
4a1d720344
filter.d/asterisk.conf: another part ` chan_sip.c:28468 handle_request_register:` in log prefix
8 years ago