Orion Poplawski
75d33c0f09
Add *_backend options for services to allow distros to set the default backend
...
per service.
Set default to systemd for Fedora as appropriate.
9 years ago
Yaroslav Halchenko
8cf614e221
ENH: allow to split ignoreip by space and/or comma ( Closes #1197 )
...
Way too many people ran into this gotcha, so lets just do it
9 years ago
weberho
d278fbca30
Fixed line suspected to be faulty
9 years ago
Yaroslav Halchenko
7a011fca1b
DOC: adjusted comment in pass2allow-ftp to my suggested wording
10 years ago
Viktor Szépe
948b12e5df
Fixed definition of knocking_url for pass2allow
10 years ago
Viktor Szépe
b638e807ad
Explicitly stating that knocking_url needs to be customized
10 years ago
Viktor Szépe
586703dcc2
Test, changelog and fixes to pass2allow
10 years ago
Viktor Szépe
5b7e1de2f4
Instead of allow-iptables-multiport actions swap blocktype and (new) returntype
10 years ago
Viktor Szépe
5d60700c0c
Added pass2allow (knocking with fail2ban)
10 years ago
Lee Clemens
2796534a5d
Update regex to work with roundcube 1.0.5 on CentOS 6
10 years ago
Viktor Szépe
79457112e9
Updated CF action
10 years ago
Yaroslav Halchenko
8c4d4aa7fb
minor: no tripple empty lines
10 years ago
Joern Muehlencord
4296d1a9a9
add froxlor-auth filter and jail
10 years ago
Lee Clemens
8f792f52fb
Add drupal-auth filter and jail
10 years ago
Yaroslav Halchenko
d28880fdca
Merge pull request #997 from yarikoptic/bf/long-purge-for-recidive
...
DOC: make a warning for recidive jail to increase dbpurgeage (Closes #964 )
10 years ago
Yaroslav Halchenko
02836b599c
Added a comment about systemd backend for jails with logs outside of journal ( Closes #959 )
10 years ago
Yaroslav Halchenko
320a28a4a4
DOC: make a warning for recidive jail to increase dbpurgeage ( Closes #964 )
10 years ago
František Šumšal
eb0d086ed0
Merge branch 'master' into nginx-botsearch
10 years ago
František Šumšal
1c6d2074fb
Changed default settings for nginx-botseach filter
10 years ago
Lee Clemens
854915920f
Remove implementation specific suffix
10 years ago
Lee Clemens
af078532ac
New jail: apache-fakegooglebot
...
Detects fake googlebot user agents in apache access log
10 years ago
František Šumšal
c8e82f18b6
Add jail nginx-botsearch
...
Jail blocks requests for predefined non-existent folders. Based on
apache-botsearch jail.
10 years ago
Yaroslav Halchenko
65980a70fc
Merge branch 'enh/recidive-allports' of https://github.com/yarikoptic/fail2ban
...
* 'enh/recidive-allports' of https://github.com/yarikoptic/fail2ban :
use iptables-allports for recidive
Conflicts:
ChangeLog
10 years ago
sebres
12e3cca3f2
port[s] typo fixed in jail.conf/nginx-http-auth, issue gh-913
10 years ago
Lee Clemens
fe72a5585c
Create Jail for Postfix based on RBL
...
Use RBL blocks to ban addresses, unique Jail so maxretry can be set to 1 (vs postfix.conf)
10 years ago
Orion Poplawski
d8867807f5
Separate php-url-fopen logpath by newline
10 years ago
Yaroslav Halchenko
2a3790f8e8
use iptables-allports for recidive
10 years ago
Yaroslav Halchenko
36abb5ed96
BF: fix $ for % in jail.conf. Debian bug #767255
10 years ago
pacop
e3a037ee3f
merge master
10 years ago
pacop
ce4f2d1c88
added filter for PortSentry with jail and samples
10 years ago
SlowRiot
fc5f729f01
adding jail conf for shellshock filter
10 years ago
Orion Poplawski
6b554fbe98
Fxi jail.conf to use more syslog macros
10 years ago
Yaroslav Halchenko
f19c5fc939
Merge pull request #770 from eltrai/master
...
Forwards bantime to action scripts
10 years ago
Yaroslav Halchenko
2d7f2fa33f
Merge pull request #756 from marclaporte/patch-1
...
typo
10 years ago
Yaroslav Halchenko
45c1095606
Merge pull request #750 from niorg/master
...
Added Directadmin filter, jail and log test
10 years ago
Pierre-Alain Dupont
3d7504c19e
Forwards bantime to action scripts
...
That way, ipset and afctl will use a real timeout and not default to a fixed value for all jails
11 years ago
Yaroslav Halchenko
43950d8b7e
BF: fix path to the exim log on Debian systems (/var/log/exim4)
11 years ago
Marc Laporte
3777591ab0
typo
11 years ago
Cyril Roos
add8e61036
Added Directadmin filter, jail and log test
11 years ago
JoelSnyder
70ed93d8cc
Update jail.conf for oracleims filter.
...
This is the jail.conf update. Hopefully this will go into pull request #734 .
11 years ago
Jason Martin
7d112430ca
Block brute-force attempts against the Monit gui
11 years ago
Ruben Kerkhof
1695d5c076
Fix a few typos
...
Found with https://github.com/lucasdemarchi/codespell
Signed-off-by: Ruben Kerkhof <ruben@rubenkerkhof.com>
11 years ago
Manuel Rüger
5a1ad75114
Fix typo in comment
11 years ago
Daniel Black
aa7e8fb9ce
DOC: Credits. close gh-644
11 years ago
Daniel Black
415f187644
ENH: sendmail-reject for all smtp ports.
11 years ago
Steven Hiscocks
a78a9d282c
DOC: Document that badips.py action should be last action for jail
11 years ago
Steven Hiscocks
0222ff4677
Merge branch 'badips-blacklist' into 0.9
...
Conflicts:
ChangeLog
- entires added in both branches.
Change:
config/action.d/badips.py
- jail.getName() changed to jail.name
11 years ago
Steven Hiscocks
0c63d0061a
DOC: Add documentation for badips.py action
11 years ago
Daniel Black
df882feb16
ENH: expand sendmail-reject jail to 465,submission
11 years ago
Daniel Black
ef29d7bd29
ENH: paths-{common,distro} normalisation
11 years ago
Daniel Black
666fd5eceb
ENH: purge excessive jail variations
11 years ago
Daniel Black
69f5baae36
ENH: jail.conf to use syslog_mail
11 years ago
Daniel Black
2d45becb0e
Merge branch '0.9' into distro-paths-gh-315
11 years ago
Daniel Black
cc8ec826c5
MRG: from master 2014-03-02
11 years ago
Daniel Black
c10cc20928
ENH: rename sendmail-spam to sendmail-reject
11 years ago
Daniel Black
fe1725c603
BF: add jail.conf definitions for sendmail* filters
11 years ago
Daniel Black
79e6543eca
Merge branch '0.9' into distro-paths-gh-315
11 years ago
Daniel Black
83266eb668
ENH: framework for distro paths
11 years ago
Steven Hiscocks
f68d85a6ac
Merge branch 'master' into 0.9
...
Conflicts:
ChangeLog
Spelling correction of 0.8.13 fixed in master
config/jail.conf
Added nagios and duplicate php-url removal in master
Just nagios added, duplicate not issue in 0.9
11 years ago
Aarón Nieves Fernández
993b7d3dfb
Duplicate jail "php-url-fopen"
11 years ago
Ivo Truxa
c207ad6058
removing ignoreip at [nagios]
...
I removed the ignoreip setting from the nagios section. As pointed out, it is redundant here. Nagios server, under normal circumstances should not trigger any access errors, and would be included in the global ignoreips anyway.
11 years ago
Ivo Truxa
dac4dd465e
ENH: Nagios filter
...
added typical configuration settings for the nagios filter
11 years ago
Daniel Black
1a1e3bec86
ENH: framework for distro paths
11 years ago
Daniel Black
2063d96e59
MRG: import Lars' PR for tine20
11 years ago
Daniel Black
2333b2d5d9
MRG: from 0.9
11 years ago
Lars Kneschke
47dd8fb897
ENH: filter for Tine 2.0
11 years ago
Daniel Black
1e8ed55a36
MRG: from 0.9
11 years ago
Steven Hiscocks
0dd6533680
BF: Add ejabberd-auth to jail.conf
11 years ago
Daniel Black
8333abe420
Merge pull request #557 from grooverdan/apache-botsearch
...
ENH: Apache botsearch + BF: tag substition
11 years ago
Daniel Black
d94efe719d
ENH: jail.conf for counter-strike
11 years ago
Daniel Black
58ebf659e4
MRG: from 0.9 to make history cleaner
11 years ago
Daniel Black
809581ae99
ENH: jail.conf for apache-botsearch
11 years ago
Daniel Black
ed9ed6d0cb
TST/ENH: fix test case for ReadStockJailFilterComplete and add missing jails
11 years ago
Daniel Black
10fa5e3439
BF: fix jails for gssftpd and qmail
11 years ago
Daniel Black
549f64e86c
BF: remove imap2 - not an IANA and probably not used
11 years ago
Daniel Black
fa6a183e94
BF: typos in jail.conf corrected
11 years ago
Daniel Black
a31c76f126
ENH: jail cleanup and fill in missing for 0.9
11 years ago
Daniel Black
755af0a51e
Merge pull request #562 from grooverdan/jail.conf-complete_and_correct
...
ENH: Jail.conf now has all filters and TST: a mechanism to test this is truee
11 years ago
Daniel Black
90fdf5fc21
ENH: jail.conf entry for groupoffice
11 years ago
Daniel Black
03aba92238
ENH: add kerio filter
11 years ago
Daniel Black
a9f804e443
ENH: complete stock jail.conf to contain all filters
11 years ago
Daniel Black
d1faae3b3b
BF: port not used in jail definition for freeswitch
11 years ago
Daniel Black
04d28fd2e1
ENH: add filter freeswitch - as raised on mailing list
11 years ago
Daniel Black
391b5fc883
MRG: from master again 2014-01-01
11 years ago
Daniel Black
856407379b
ENH: add filter openwebmail. Closes gh-543.
11 years ago
Daniel Black
c074773805
ENH: apache modsecurity from 0.9 branch
11 years ago
Daniel Black
ea2a13946e
TST: more test of filters
11 years ago
Daniel Black
c9cfdca396
ENH: add filter for apache-modsecurity
11 years ago
Daniel Black
ddac79c15c
TST: include blank ignorecommand in jail.conf to indicate default value and to raise test coverage
11 years ago
bes.internal
ebd89ec077
New ignorecommand that is added to the ignoreip list from output of an external program
...
ignorecommand update man and fix protocol help
ENH: run ignore command only after internal list has been examined. Change interface on ignorecommand to take IP as environment variable and return true if it is to be banned
ENH: ignore IP command to take tagged command
DOC: man pages for ingorecommand
TST: add test cases for ignorecommand
11 years ago
Daniel Black
ed2f46759c
MRG: restore accidently deleted pam comment in jail.conf
11 years ago
Daniel Black
7c0efc8ec8
MRG: merge so far - flushLogs not working yet
11 years ago
Steven Hiscocks
f742ed0e4b
DOC: when to use blocklist.de reporting
...
Taken from commit 1846056606
11 years ago
Steven Hiscocks
e810ec009d
ENH: Added blocklist.de reporting API action
11 years ago
Daniel Black
1846056606
DOC: when to use xarf messages to network owner
11 years ago
Daniel Black
bfd435091d
ENH: jail examples for xarf-login-attack
11 years ago
Daniel Black
04438cd1a1
BF/ENH: mysql jail - rename to mysql-syslog to be consistent with 0.8.13. Add port to syslog defination. Document mysql configuration required for mysql jails
11 years ago
Daniel Black
3f4d179612
BF: smtps not an IANA port - from #447
11 years ago
Daniel Black
fe9e077acf
BF: correct spelling of port for solid-pop3 jail in jail.conf
11 years ago
Yaroslav Halchenko
25e967f23b
Merge branch 'mysqld-syslog-iptables-name-too-long' of https://github.com/grooverdan/fail2ban
...
* 'mysqld-syslog-iptables-name-too-long' of https://github.com/grooverdan/fail2ban :
BF: jail name mysqld-syslog-iptables too long. removed -iptables. Thanks Stefan (#447 )
Conflicts:
ChangeLog
11 years ago