92 Commits (53e16e07addb827ab11e608cd4204f0513f09ec4)

Author	SHA1	Message	Date
Steven Hiscocks	1c7d28d1ea	TST: Add qmail sample log	12 years ago
Steven Hiscocks	5437f5fe90	TST: Add gssftpd sample log	12 years ago
Steven Hiscocks	f7d8e68738	TST: Add apache-badbots sample log	12 years ago
Steven Hiscocks	37f240bef0	TST: Add sample log for php-url-fopen filter	12 years ago
Steven Hiscocks	cf1e5bdbc2	ENH: Tweak proftpd regex and add sample logs ... Needed to add optional ":" post __pid_re, and for consistency, decided to make use of __prefix_line instead which includes this.	12 years ago
Steven Hiscocks	e59a4960a3	TST: Add additional sample log line for apache-noscript	12 years ago
Steven Hiscocks	8b9bafda79	ENH: Change lighttpd-fastcgi to suhosin, and improve regex and samples ... suhosin is hardened php implmentation, which will log the alerts (as seen in samples) to stderr, which is picked up by fastcgi webserver (e.g. lighttpd, apache, nginx)	12 years ago
Steven Hiscocks	4033857f63	ENH: Improve xinetd-fail regex and add sample logs	12 years ago
Steven Hiscocks	b5ffbced37	TST: Sample test cases now handle ignoreregex and add recidive samples	12 years ago
Steven Hiscocks	e7b7815de3	TST: Add additional sshd sample logs	12 years ago
Steven Hiscocks	a11f91b835	ENH: Improve cyrus-imap regex and add extra sample line	12 years ago
Steven Hiscocks	534be189dc	ENH: Improve sieve regex and add sample line	12 years ago
Steven Hiscocks	d791ba12ba	TST: Add sample log for dropbear filter	12 years ago
Steven Hiscocks	ab671b0b1a	ENH: Improve wuftpd failregex, drop duplicate pam regex and add sample ... For wu-ftpd configured to use pam, the pam filter used be used, as regex is more robust.	12 years ago
Steven Hiscocks	57a6c11260	ENH: Improve courierlogin regex and add sample logs	12 years ago
Steven Hiscocks	bd175f0267	ENH: Improve cyrus-imap regex and add sample log file	12 years ago
Steven Hiscocks	83a80a29ea	ENH: Improve couriersmtp and add sample logs	12 years ago
Steven Hiscocks	eb2f0c9272	ENH: Improve postfix regex and add more samples	12 years ago
Steven Hiscocks	a012b54117	TST: Add additional postfix filter sample	12 years ago
Steven Hiscocks	2a3a627322	TST: Add sample for sieve regex	12 years ago
Yaroslav Halchenko	f6a8a04cf3	ENH: roundcube-auth - adopt for current format with trailing error message. thanks @kwirk for the review/feedback ... I also used non-greedy .*? for the login portion since not sure if space could be there and trying to minimize possibility of reacting on injected "from <HOST>" somewhere within the trailing .*	12 years ago
Steven Hiscocks	4855cae487	Merge branch 'sample-log-meta-data' ... Conflicts: testcases/files/logs/dovecot	12 years ago
Steven Hiscocks	728399c39e	Merge pull request #281 from kwirk/dovecot-filter ... ENH: dovecot filter additions for session, time value and blank user	12 years ago
Steven Hiscocks	40f67c64b8	TST: Test sample logs' entries are matched by filter regexs	12 years ago
Daniel Black	5412d7336f	DOC: ChangeLog confict	12 years ago
Daniel Black	619603fe05	BF: match asterisk InvalidPassword correctly	12 years ago
Steven Hiscocks	bfa2b9dec3	ENH: dovecot filter additions for session, time value and blank user	12 years ago
Daniel Black	d6dece4900	ENH: Split log and provide jail examples	12 years ago
Yaroslav Halchenko	e6ebcf6687	Merge branch 'dovecot' of https://github.com/grooverdan/fail2ban ... * 'dovecot' of https://github.com/grooverdan/fail2ban: ENH: remove non-capturing groups for readibility BF: fix dovecot filter for when no TLS is enabled on pop/imap Conflicts: ChangeLog -- changelog entries. Also untabified few other spots	12 years ago
Yaroslav Halchenko	f0f237fa05	Merge pull request #269 from grooverdan/asterisk ... ENH: filter.d/asterisk - consolidate log prefix regex and add a few fail messages	12 years ago
Daniel Black	4777cfd4e7	ENH: split out exim-spam into speparate filter	12 years ago
Daniel Black	c7d64c3c7f	TST: url reference fix	12 years ago
Daniel Black	ca996ace5e	ENH: remove temporary failures from local_scan in line with comments in gh-258	12 years ago
Daniel Black	72f9e6a51e	ENH/TST: more samples and rejection types for sender verify fail and rejected RCPT	12 years ago
Daniel Black	3b76fc79f9	BF: fix dovecot filter for when no TLS is enabled on pop/imap	12 years ago
Yaroslav Halchenko	1b170b2aef	BF: support apache 2.4 more detailed error log format. Close #268	12 years ago
Yaroslav Halchenko	6d331bcbea	BF: make colon after [daemon] optional. Close #267	12 years ago
Daniel Black	fa7a105483	ENH: filter.d/asterisk - consolidate log prefix regex and add a few fail messages	12 years ago
Daniel Black	b8cfda68b8	ENH: new exim filter regexs. Also note a begining PID in this format. Thanks to ftoppi for the log entries	12 years ago
Daniel Black	d441d61a1e	TST/ENH: Improve regex around exim ... rejected by local_scan now has test cases. Unrouteable address error messages now normalised after looking into exim code.	12 years ago
Yaroslav Halchenko	9d4b613ee4	Merge branch '3proxy' of https://github.com/grooverdan/fail2ban ... * '3proxy' of https://github.com/grooverdan/fail2ban: BF: fix to proxy port in 3proxy example ENH: sample log + more specific regex BF: authentication errors end in 01-09 but the beginning part indicates the service as per https://github.com/fail2ban/fail2ban/issues/246#issuecomment-19327955 thanks to ykimon BF: need to anchor the start to avoid another repeat of DoS injection like Apache ENH: stricter regex thanks to Steven Hiscocks (kwirk) DOC: credits Conflicts: ChangeLog	12 years ago
Yaroslav Halchenko	173fe48e77	Merge branch 'exim' of https://github.com/grooverdan/fail2ban ... * 'exim' of https://github.com/grooverdan/fail2ban: BF/ENH: Incorrect authentication data doesn't need tailier so that's optional. Also gained log entry for Unrouteable address ENH: readibility thanks to Yaroslav ENH/BF: exim improvements with sample Conflicts: ChangeLog	12 years ago
Yaroslav Halchenko	ec629ab4e8	Merge branch 'proftpd' of https://github.com/grooverdan/fail2ban ... * 'proftpd' of https://github.com/grooverdan/fail2ban: ENH: proftpd chan accept usernames with spaces ENH: injection of fail data into USER field ENH: proftp regex hardening and log messages Conflicts: ChangeLog	12 years ago
Daniel Black	8cc13b5b40	BF/ENH: Incorrect authentication data doesn't need tailier so that's optional. Also gained log entry for Unrouteable address	12 years ago
Daniel Black	e8b6acfa65	TST: attempts at injection with username=rhost=1.2.3.4 have no user= logged in dovecot-1.2.15	12 years ago
Daniel Black	2e2ec5d1f5	ENH: injection of fail data into USER field	12 years ago
Daniel Black	dbe7ffe050	ENH: dovecot regexs rewritten and extra failures	12 years ago
Daniel Black	4c67a269bf	ENH: proftp regex hardening and log messages	12 years ago
Daniel Black	3e3802512a	ENH/BF: exim improvements with sample	12 years ago
Daniel Black	9dbaec0894	ENH: sample log + more specific regex	12 years ago