repcsi
199759f0ba
added pf[protocol=all] options as recommended by sebres
12 months ago
sebres
d6896eb26d
New logtarget: systemd-journal;
...
rebased #1403 from da2x:feature-systemd-journal
2 years ago
jeaye
6f3d425c4d
Update postfix filters and tests
8 years ago
Andrew James Collett
55e107310f
Added config for AbuseIPDB, ony tested on Ubuntu 16.04
8 years ago
Serg G. Brester
feae7370ce
Update THANKS
8 years ago
sebres
5678d08a79
filter.d/dovecot.conf update:
...
- fixes failregex, that ignores failures through some irrelevant info (closes #1623 );
- ignores whole additionally irrelevant info in anchored regex before fixed failure data `\((?:auth failed, \d+ attempts( in \d+ secs)?|tried to use (disabled|disallowed) \S+ auth)\)`
- review, IPv6 compatibility fix, non-capturing groups
8 years ago
Alexander Koeppe
ce196744d1
Update ChangeLog / THANKS entries
9 years ago
sebres
e595fefc9b
change log and thanks entries
9 years ago
sebres
9d13bb0c3a
ChangeLog and THANKS entries
9 years ago
Yaroslav Halchenko
2adf5855ac
Changelog for the recent PR and added Tom to THANKS
9 years ago
sebres
eb87638ead
ChangeLog entry for OpenHAB home automation filter (gh-1223)
9 years ago
Pablo Rodriguez Fernandez
a28e6b442e
Add check in apache-fakegooglebot to protect against PTR fake record
...
An attacker may return a PTR record which fakes a Googlebot's domain
name. This modification resolves the PTR records to verify it.
See "Verifying Googlebot":
<https://support.google.com/webmasters/answer/80553?vid=1-635800030504666679-1963774919 >
9 years ago
Kevin Locke
2a5c93cfb5
Update ChangeLog and THANKS for "Auth fail" changes
...
Document the changes from 36919d9f
in the ChangeLog and add myself to
the THANKS file (at @sebres suggestion).
Signed-off-by: Kevin Locke <kevin@kevinlocke.name>
9 years ago
M. Maraun
2895d981fa
Set Timeout at urlopen to 3 seconds
9 years ago
M. Maraun
6d72602f6b
Set Timeout at urlopen to 3 seconds
10 years ago
Aaron Brice
7ae0ef2408
Fix actions in ufw.conf
...
On Ubuntu 15.04 the ufw action was not working.
- With empty <application>, receiving errors:
2015-04-24 16:28:35,204 fail2ban.filter [8527]: INFO [sshd] Found 43.255.190.157
2015-04-24 16:28:35,695 fail2ban.actions [8527]: NOTICE [sshd] Ban 43.255.190.157
2015-04-24 16:28:35,802 fail2ban.action [8527]: ERROR [ -n "" ] && app="app " -- stdout: b''
2015-04-24 16:28:35,803 fail2ban.action [8527]: ERROR [ -n "" ] && app="app " -- stderr: b''
2015-04-24 16:28:35,803 fail2ban.action [8527]: ERROR [ -n "" ] && app="app " -- returned 1
- With action = ufw[application=OpenSSH], it was silently not doing
anything (no errors after "Ban x.x.x.x", but no IP addresses in ufw
status).
Re-arranged the bash commands on two lines, and it works with or without
<application>.
10 years ago
Thomas Mayer
1c2e8f4185
Add myself to the THANKS section
10 years ago
František Šumšal
9bd25f51c1
Added ChangeLog and THANKS entry
10 years ago
Orion Poplawski
ee5c5b34d6
Add ChangeLog and THANKS entry
10 years ago
Andrew St. Jean
e0f11ae722
Modified the ChangeLog and THANKS files to reflect the addition of action.d/nsupdate.conf.
10 years ago
TorontoMedia
1dfd9941df
Update THANKS
10 years ago
Florian Pelgrim
6293e44889
Added myself into THANKS
10 years ago
SlowRiot
7b5dc9f24f
adding test case, changelog and thanks entries for apache shellshock filter
10 years ago
Yaroslav Halchenko
8f521b8551
DOC: Changelog and THANKS for previous changes
10 years ago
Daniel Black
1864f75b3b
Credits and notes from #806
10 years ago
Yaroslav Halchenko
2756bbe12a
changelog and thanks for the preceding fix
...
Conflicts:
ChangeLog
THANKS
10 years ago
leftyfb
1101021896
Added entry for Cloudflare action
10 years ago
Yaroslav Halchenko
3339dc8d84
ENH: cyrus-imap -- catch also 'user not found' attempts
10 years ago
Sean DuBois
84b7e93a47
ENH: Add version command to protocol
...
TST: Add test for version server command
11 years ago
SATO Kentaro
1e1c4ac62a
ENH: Add <chain> to iptables-ipsets.
11 years ago
JoelSnyder
c325e88634
Update THANKS
...
Per Steven.
11 years ago
pmarrapese
96918acee4
more explicit match for sshd filter & added test
11 years ago
Steven Hiscocks
1fa8f9fa70
DOC: Tweak ChangeLog and THANKS
11 years ago
Steven Hiscocks
1c20fd88d4
DOC: Update docs in reference to time zone related fix
11 years ago
Jason Martin
72bfd14330
Tidy up filter.d/monit.conf, make regex more complete.
...
Add ChangeLog / THANKS entry.
Add test cases.
11 years ago
Daniel Black
ef186a9ba9
DOC: add thanks for last commit
11 years ago
Daniel Black
3d776afbb0
ENH: add filter for sendmail-{auth,spam}. Closes gh-20
11 years ago
Steven Hiscocks
2a37ee2fb7
ENH: Add root user check in xt_recent, and add missing actionstop
...
Thanks to Helmut Grohne on IRC for suggestion
11 years ago
Daniel Black
5f4d0ed576
ENH: ssh filter - "Disconnecting: Too many authentication failures.." matching Connection log message
11 years ago
Daniel Black
9b614ce486
ENH: dovecot filter enhancements
11 years ago
Daniel Black
ca57427080
BF: firewallcmd-ipset had non-working actioncheck
11 years ago
Daniel Black
c8ae064b79
ENH: tighten regex and change failJSON to support timezone. Closes gh-583
11 years ago
Daniel Black
36d38043ba
DOC: thanks Lars for the filter base and log samples
11 years ago
Daniel Black
263ac32730
ENH: test log samples for kerio thanks to
...
Tony Lawrence
11 years ago
Daniel Black
058621f9bd
ENH: continue with rest of fail2ban config even if errors. Closes gh-585
11 years ago
Daniel Black
93613e82f0
DOC: credits for action.d/badips
11 years ago
Tomas Pihl
b52a4441fd
Support ACL-events without AccountID. Typically happens when a registration
...
from an unknown domain is performed.
Add credits
11 years ago
Daniel Black
0fb6bc7188
ENH: add filter for Counter Strike 1.6. Closes gh-347
11 years ago
Daniel Black
db7b7bfefa
Credits for groupoffice
11 years ago
Daniel Black
d727ba639a
ENH: exim-spam to include spamassassin log entry. Closes gh-533
11 years ago