Christian Brandlehner
a4d8426401
Support for IBM Domino SMTP task ( #1603 )
...
filter.d/domino-smtp.conf
8 years ago
sebres
c9f32f75e6
Merge branch '0.9-fix-regex-using-journal' into 0.10-fix-regex-using-journal (merge point against 0.9 after back-porting gh-1660 from 0.10)
8 years ago
Andrew James Collett
3991f51f30
Update jail.conf
...
Sigh, added a space back that I somehow missed in Vim, despite it being a rebase...
8 years ago
Andrew James Collett
10d61e0779
Fixed the spaces again
8 years ago
Andrew James Collett
b35391e768
Update jail.conf
...
Fixing spacing
8 years ago
Andrew James Collett
1c41390f7c
Restructured the way the catagories work.
...
Jail.conf is cleaner and abuseipdb.conf is more flexible.
8 years ago
Andrew James Collett
55e107310f
Added config for AbuseIPDB, ony tested on Ubuntu 16.04
8 years ago
sebres
45f1d811c9
Merge branch 'alex1702-1586'
8 years ago
sebres
67c14afd8e
ChangeLog entry added + jail.conf review
8 years ago
Serg G. Brester
4f5389fee5
Update jail.conf
8 years ago
Alex
8ac28e5dcb
Make changes and add test file
8 years ago
Alex
8c40766511
Add Mongodb-auth filter and jail
8 years ago
sebres
0eea362aa0
Merge branch 'master' into 0.10
8 years ago
Andrii Melnyk
b2e3affaa0
adding openldap slapd filter
9 years ago
sebres
39366e703a
Merge branch 'master' into 0.10
...
# Conflicts:
# fail2ban/server/filter.py
9 years ago
sebres
8ec4e1189e
use raw host (don't use textToIp) if usedns exactly `raw`, because `usedns = no` should ignore no ip failures
9 years ago
Alexander Koeppe
db9f3f738f
add ip6-loopback to default ignoreip statement
9 years ago
sebres
d7e7b52013
Merge remote-tracking branch 'remotes/gh-upstream/master' into f2b-perfom-prepare-716
9 years ago
Yaroslav Halchenko
3f437b32db
Merge remote-tracking branch 'pr/1288/head'
...
* pr/1288/head:
Update haproxy-http-auth.conf
Added HAProxy HTTP Auth filter
Conflicts:
config/jail.conf - resolved + removed unnecessary filter/enabled (defaults should be as good)
9 years ago
local
40c0bed82c
action_mw, action_mwl, action_cf_mwl ignore the "sender" option when sending a notification email.
...
This commit adds "sender="%(sender)s"" to the three actions to correct this issue.
9 years ago
Yaroslav Halchenko
5d0d96a5cb
Merge pull request #1286 from yarikoptic/enh-jail
...
ENH: harmonize jail.conf + 1 more test that passed bantime is non-degenerate and int
9 years ago
Jordan Moeser
e133762a28
Added HAProxy HTTP Auth filter
9 years ago
sebres
cf334421bd
Provides fail2ban version to jail (as interpolation variable during parse of jail.conf);
...
BF: use `fail2ban_agent` as user-agent in actions badips, blocklist_de, etc. (closes #1271 , closes #1272 )
9 years ago
Yaroslav Halchenko
28c9832293
RF: harmonize jail.conf (no explicit enabled=false in jails, match filter name for screesharingd, etc)
9 years ago
Yaroslav Halchenko
69aa1feac0
Merge "Mac OS Screen Sharing filter" PR 1232
...
* pr/1232/head:
removed system.log
Removed old svn revision comment
removed false matches
Removed includes comment for screensharing jail
Now using a literal logpath for screensharing jail
Fixed blatant typo in regex
clarified comments on sample log format
Fixed name (again?)
Made screensharing jail off by default
Changed regex prequel
added entry for new screensharingd filter
name change & new sample data
Added json metadata
Sample log for test case
Replaced .* with literal
Update jail.conf
Added new path variable for system.log
Added in settings for screensharingd filter
Created file
Conflicts:
ChangeLog - moved to New Features
config/jail.conf - kept at the end
9 years ago
sebres
d22b2498d4
normalizing time config entries: use time abbreviation (str2seconds) for all time options such 'dbpurgeage', 'bantime', 'findtime', ex.: default '1d' instead '86400';
...
code review and test case extended;
9 years ago
Ross Brown
106c3eab9a
Added filter and jail for murmur/mumble-server.
9 years ago
Orion Poplawski
c656cb0d36
Merge branch 'master' into journaldefault
...
Conflicts:
ChangeLog
9 years ago
Orion Poplawski
ba76f4ca2f
Fix typo
9 years ago
sebres
f359ed8c36
Fixed directly defined banaction for allports jails like pam-generic, recidive, etc with new default variable `banaction_allports` (+ man entries for both variables added);
...
closes gh-1216
9 years ago
Simon Brown
5839a3bd80
Removed includes comment for screensharing jail
9 years ago
sebres
6884593ab8
New filter `nginx-limit-req` ban hosts, that were failed through nginx by limit request processing rate (ngx_http_limit_req_module)
9 years ago
Orion Poplawski
0661aece46
Merge branch 'master' into journaldefault
...
Conflicts:
ChangeLog
9 years ago
Simon Brown
65bc5cf6ba
Now using a literal logpath for screensharing jail
9 years ago
Simon Brown
acee68a9ee
Made screensharing jail off by default
...
Also added note about requiring paths-osx.conf.
9 years ago
Simon Brown
d17d837b8c
Update jail.conf
...
Added logencoding to screensharing jail to avoid encoding error messages in fail2ban log
9 years ago
Simon Brown
80546c6164
Added in settings for screensharingd filter
9 years ago
1technophile
2861a957a9
filter for openhab domotic software authentication failure with the rest api and web interface + test cases;
...
closes gh-1223
9 years ago
Orion Poplawski
ced7be94b2
Fix postfix_log typo
9 years ago
Orion Poplawski
75d33c0f09
Add *_backend options for services to allow distros to set the default backend
...
per service.
Set default to systemd for Fedora as appropriate.
9 years ago
Yaroslav Halchenko
8cf614e221
ENH: allow to split ignoreip by space and/or comma ( Closes #1197 )
...
Way too many people ran into this gotcha, so lets just do it
9 years ago
weberho
d278fbca30
Fixed line suspected to be faulty
9 years ago
Yaroslav Halchenko
7a011fca1b
DOC: adjusted comment in pass2allow-ftp to my suggested wording
10 years ago
Viktor Szépe
948b12e5df
Fixed definition of knocking_url for pass2allow
10 years ago
Viktor Szépe
b638e807ad
Explicitly stating that knocking_url needs to be customized
10 years ago
Viktor Szépe
586703dcc2
Test, changelog and fixes to pass2allow
10 years ago
Viktor Szépe
5b7e1de2f4
Instead of allow-iptables-multiport actions swap blocktype and (new) returntype
10 years ago
Viktor Szépe
5d60700c0c
Added pass2allow (knocking with fail2ban)
10 years ago
Lee Clemens
2796534a5d
Update regex to work with roundcube 1.0.5 on CentOS 6
10 years ago
Viktor Szépe
79457112e9
Updated CF action
10 years ago
Yaroslav Halchenko
8c4d4aa7fb
minor: no tripple empty lines
10 years ago
Joern Muehlencord
4296d1a9a9
add froxlor-auth filter and jail
10 years ago
Lee Clemens
8f792f52fb
Add drupal-auth filter and jail
10 years ago
Yaroslav Halchenko
d28880fdca
Merge pull request #997 from yarikoptic/bf/long-purge-for-recidive
...
DOC: make a warning for recidive jail to increase dbpurgeage (Closes #964 )
10 years ago
Yaroslav Halchenko
02836b599c
Added a comment about systemd backend for jails with logs outside of journal ( Closes #959 )
10 years ago
Yaroslav Halchenko
320a28a4a4
DOC: make a warning for recidive jail to increase dbpurgeage ( Closes #964 )
10 years ago
František Šumšal
eb0d086ed0
Merge branch 'master' into nginx-botsearch
10 years ago
František Šumšal
1c6d2074fb
Changed default settings for nginx-botseach filter
10 years ago
Lee Clemens
854915920f
Remove implementation specific suffix
10 years ago
Lee Clemens
af078532ac
New jail: apache-fakegooglebot
...
Detects fake googlebot user agents in apache access log
10 years ago
František Šumšal
c8e82f18b6
Add jail nginx-botsearch
...
Jail blocks requests for predefined non-existent folders. Based on
apache-botsearch jail.
10 years ago
Yaroslav Halchenko
65980a70fc
Merge branch 'enh/recidive-allports' of https://github.com/yarikoptic/fail2ban
...
* 'enh/recidive-allports' of https://github.com/yarikoptic/fail2ban :
use iptables-allports for recidive
Conflicts:
ChangeLog
10 years ago
sebres
12e3cca3f2
port[s] typo fixed in jail.conf/nginx-http-auth, issue gh-913
10 years ago
Lee Clemens
fe72a5585c
Create Jail for Postfix based on RBL
...
Use RBL blocks to ban addresses, unique Jail so maxretry can be set to 1 (vs postfix.conf)
10 years ago
Orion Poplawski
d8867807f5
Separate php-url-fopen logpath by newline
10 years ago
Yaroslav Halchenko
2a3790f8e8
use iptables-allports for recidive
10 years ago
Yaroslav Halchenko
36abb5ed96
BF: fix $ for % in jail.conf. Debian bug #767255
10 years ago
pacop
e3a037ee3f
merge master
10 years ago
pacop
ce4f2d1c88
added filter for PortSentry with jail and samples
10 years ago
SlowRiot
fc5f729f01
adding jail conf for shellshock filter
10 years ago
Orion Poplawski
6b554fbe98
Fxi jail.conf to use more syslog macros
10 years ago
Yaroslav Halchenko
f19c5fc939
Merge pull request #770 from eltrai/master
...
Forwards bantime to action scripts
10 years ago
Yaroslav Halchenko
2d7f2fa33f
Merge pull request #756 from marclaporte/patch-1
...
typo
10 years ago
Yaroslav Halchenko
45c1095606
Merge pull request #750 from niorg/master
...
Added Directadmin filter, jail and log test
10 years ago
Pierre-Alain Dupont
3d7504c19e
Forwards bantime to action scripts
...
That way, ipset and afctl will use a real timeout and not default to a fixed value for all jails
11 years ago
Yaroslav Halchenko
43950d8b7e
BF: fix path to the exim log on Debian systems (/var/log/exim4)
11 years ago
Marc Laporte
3777591ab0
typo
11 years ago
Cyril Roos
add8e61036
Added Directadmin filter, jail and log test
11 years ago
JoelSnyder
70ed93d8cc
Update jail.conf for oracleims filter.
...
This is the jail.conf update. Hopefully this will go into pull request #734 .
11 years ago
Jason Martin
7d112430ca
Block brute-force attempts against the Monit gui
11 years ago
Ruben Kerkhof
1695d5c076
Fix a few typos
...
Found with https://github.com/lucasdemarchi/codespell
Signed-off-by: Ruben Kerkhof <ruben@rubenkerkhof.com>
11 years ago
Manuel Rüger
5a1ad75114
Fix typo in comment
11 years ago
Daniel Black
aa7e8fb9ce
DOC: Credits. close gh-644
11 years ago
Daniel Black
415f187644
ENH: sendmail-reject for all smtp ports.
11 years ago
Steven Hiscocks
a78a9d282c
DOC: Document that badips.py action should be last action for jail
11 years ago
Steven Hiscocks
0222ff4677
Merge branch 'badips-blacklist' into 0.9
...
Conflicts:
ChangeLog
- entires added in both branches.
Change:
config/action.d/badips.py
- jail.getName() changed to jail.name
11 years ago
Steven Hiscocks
0c63d0061a
DOC: Add documentation for badips.py action
11 years ago
Daniel Black
df882feb16
ENH: expand sendmail-reject jail to 465,submission
11 years ago
Daniel Black
ef29d7bd29
ENH: paths-{common,distro} normalisation
11 years ago
Daniel Black
666fd5eceb
ENH: purge excessive jail variations
11 years ago
Daniel Black
69f5baae36
ENH: jail.conf to use syslog_mail
11 years ago
Daniel Black
2d45becb0e
Merge branch '0.9' into distro-paths-gh-315
11 years ago
Daniel Black
cc8ec826c5
MRG: from master 2014-03-02
11 years ago
Daniel Black
c10cc20928
ENH: rename sendmail-spam to sendmail-reject
11 years ago
Daniel Black
fe1725c603
BF: add jail.conf definitions for sendmail* filters
11 years ago
Daniel Black
79e6543eca
Merge branch '0.9' into distro-paths-gh-315
11 years ago
Daniel Black
83266eb668
ENH: framework for distro paths
11 years ago
Steven Hiscocks
f68d85a6ac
Merge branch 'master' into 0.9
...
Conflicts:
ChangeLog
Spelling correction of 0.8.13 fixed in master
config/jail.conf
Added nagios and duplicate php-url removal in master
Just nagios added, duplicate not issue in 0.9
11 years ago
Aarón Nieves Fernández
993b7d3dfb
Duplicate jail "php-url-fopen"
11 years ago
Ivo Truxa
c207ad6058
removing ignoreip at [nagios]
...
I removed the ignoreip setting from the nagios section. As pointed out, it is redundant here. Nagios server, under normal circumstances should not trigger any access errors, and would be included in the global ignoreips anyway.
11 years ago