Steven Hiscocks
53e16e07ad
ENH: Minor tweak on previous commit proftpd regex changes
11 years ago
Steven Hiscocks
9002de069e
ENH: Improve proftpd regex.
...
Taken from @yarikoptic comment:
https://github.com/fail2ban/fail2ban/pull/303#discussion_r5687500
11 years ago
Steven Hiscocks
11100a2fc0
DOC: Changelog additions for regex changes
12 years ago
Steven Hiscocks
bf021ebd97
TST: Mandate that all filters and each regex has sample log entry
12 years ago
Steven Hiscocks
1c7d28d1ea
TST: Add qmail sample log
12 years ago
Steven Hiscocks
5437f5fe90
TST: Add gssftpd sample log
12 years ago
Steven Hiscocks
f7d8e68738
TST: Add apache-badbots sample log
12 years ago
Steven Hiscocks
2f4aaa9fb9
ENH: Simplify sieve filter failregex
12 years ago
Steven Hiscocks
b5639a8672
ENH: Simplify cyrus-imap filter fail regex
12 years ago
Steven Hiscocks
37f240bef0
TST: Add sample log for php-url-fopen filter
12 years ago
Steven Hiscocks
cf1e5bdbc2
ENH: Tweak proftpd regex and add sample logs
...
Needed to add optional ":" post __pid_re, and for consistency, decided
to make use of __prefix_line instead which includes this.
12 years ago
Steven Hiscocks
e59a4960a3
TST: Add additional sample log line for apache-noscript
12 years ago
Steven Hiscocks
8b9bafda79
ENH: Change lighttpd-fastcgi to suhosin, and improve regex and samples
...
suhosin is hardened php implmentation, which will log the alerts (as
seen in samples) to stderr, which is picked up by fastcgi webserver
(e.g. lighttpd, apache, nginx)
12 years ago
Steven Hiscocks
4033857f63
ENH: Improve xinetd-fail regex and add sample logs
12 years ago
Steven Hiscocks
b5ffbced37
TST: Sample test cases now handle ignoreregex and add recidive samples
12 years ago
Steven Hiscocks
e7b7815de3
TST: Add additional sshd sample logs
12 years ago
Steven Hiscocks
a11f91b835
ENH: Improve cyrus-imap regex and add extra sample line
12 years ago
Steven Hiscocks
534be189dc
ENH: Improve sieve regex and add sample line
12 years ago
Steven Hiscocks
d791ba12ba
TST: Add sample log for dropbear filter
12 years ago
Steven Hiscocks
ab671b0b1a
ENH: Improve wuftpd failregex, drop duplicate pam regex and add sample
...
For wu-ftpd configured to use pam, the pam filter used be used, as regex
is more robust.
12 years ago
Steven Hiscocks
57a6c11260
ENH: Improve courierlogin regex and add sample logs
12 years ago
Steven Hiscocks
bd175f0267
ENH: Improve cyrus-imap regex and add sample log file
12 years ago
Steven Hiscocks
83a80a29ea
ENH: Improve couriersmtp and add sample logs
12 years ago
Steven Hiscocks
eb2f0c9272
ENH: Improve postfix regex and add more samples
12 years ago
Steven Hiscocks
a012b54117
TST: Add additional postfix filter sample
12 years ago
Steven Hiscocks
2a3a627322
TST: Add sample for sieve regex
12 years ago
Yaroslav Halchenko
60aa44f42d
DOC: added a note on commit comments for merges with Conflicts
12 years ago
Steven Hiscocks
bf05f2ac95
Merge branch 'filter-failregex-return'
...
Conflicts:
server/filter.py
12 years ago
Steven Hiscocks
ba29f6bef3
DOC: Update doc in reference to changes for sample testcases
12 years ago
Steven Hiscocks
c2bdfefb62
DOC: Comment to fail2ban-regex - flagging lines matched multiple regexs
12 years ago
Yaroslav Halchenko
e4d759ac94
Merge pull request #283 from yarikoptic/master
...
Roundcube failregex -- anchor at the beginning as well + mandate <HOST> to end with alphanumeric
12 years ago
Yaroslav Halchenko
90ec82669c
DOC: changelog entries for preceeding changes
12 years ago
Yaroslav Halchenko
f6a8a04cf3
ENH: roundcube-auth - adopt for current format with trailing error message. thanks @kwirk for the review/feedback
...
I also used non-greedy .*? for the login portion since not sure if space could
be there and trying to minimize possibility of reacting on injected "from
<HOST>" somewhere within the trailing .*
12 years ago
Yaroslav Halchenko
0a02cfe9e8
ENH: <HOST> must end with alphanumeric \w (not a dot or a dash etc)
...
Otherwise <HOST> regexp might swallow period in the sentence right after the address.
I have decided to enforce alphanumeric instead of switching to non-greedy +? ... because
I think it is closer to what we actually want here
12 years ago
Yaroslav Halchenko
8add63c733
ENH: anchor roundcube-auth at the beginning as well
12 years ago
Yaroslav Halchenko
148cbd8d2a
ENH: heavier debugging -- log split date/log line even for no match. Log matching regex upon match
12 years ago
Steven Hiscocks
1a2b6442a0
ENH+BF+TST: Filter now returns reference to failregex and ignoreregex
...
This avoids duplication of code across fail2ban-regex and samples test
cases. This also now more neatly resolves the issue of double counting
date templates matches in fail2ban-regex.
In addition, the samples test cases now also print a warning message
that not all regexs have samples for them, with future plan to change
this to an assertion.
12 years ago
Yaroslav Halchenko
5bd186b854
ENH(minor): fail2ban-regex comment line doesn't have to have a space after leading #
12 years ago
Steven Hiscocks
2c8747cc76
BF: fail2ban-regex date detector template hits count now correct
...
closes #295
12 years ago
Steven Hiscocks
4855cae487
Merge branch 'sample-log-meta-data'
...
Conflicts:
testcases/files/logs/dovecot
12 years ago
Steven Hiscocks
1116f23151
TST: Sample log regex test now warns if no log for a filter
...
Also checks that at least some tests are present
12 years ago
Yaroslav Halchenko
e562515df7
Merge pull request #292 from grooverdan/solaris-doc
...
DOC: shorten example and provide clarification and spelling fix
12 years ago
Steven Hiscocks
728399c39e
Merge pull request #281 from kwirk/dovecot-filter
...
ENH: dovecot filter additions for session, time value and blank user
12 years ago
Steven Hiscocks
94376bfbe1
TST: Handle lack of `json` library in python2.5 for samples test case
12 years ago
Daniel Black
09850d6ba5
DOC: shorten example and provide clarifcation and spelling fixes
12 years ago
Steven Hiscocks
40f67c64b8
TST: Test sample logs' entries are matched by filter regexs
12 years ago
Steven Hiscocks
606e97683b
BF: jail.conf multiport actions previously using single port iptables
12 years ago
Daniel Black
e433a5c633
Merge pull request #260 from grooverdan/develop
...
DOC: developing filters without DoS + close/fix/resolves messages in commits
12 years ago
Daniel Black
424da92601
DOC: close message for commits.
12 years ago
Daniel Black
1d6d5a7aae
DOC: ChangeLog merge confict
12 years ago