Yaroslav Halchenko
63237a785e
DOC: forgotten --help entry for " unban "
12 years ago
Yaroslav Halchenko
f52ba9923a
ENH: downgrade "already banned" from WARN to INFO level (Closes gh-79)
...
Most of the time it is a benign latency effect so nothing to warn about.
12 years ago
Yaroslav Halchenko
1e12c220e6
minor: added a note on now "negative" log entries on "POSSIBLE BREAK-IN ATTEMPT"
12 years ago
Yaroslav Halchenko
6ecf4fd80a
Merge pull request #64 from sourcejedi/remove_sshd_rdns
...
Misconfigured DNS should not ban *successful* ssh logins
Per our discussion indeed better (and still as "safe") to not punish users behind bad DNS
12 years ago
Yaroslav Halchenko
b773ed617b
DOC: minor "fixes" in DEVELOP
12 years ago
David Engeset
2d672d1c81
Added in while loop to process the Fail Manager after the requested banned IP was added to its queue. This solves the issue of needing to touch the log file that is being monitored to get the IP to be banned accordingly. Added in import of FailManagerEmpty exception class.
12 years ago
Yaroslav Halchenko
f14c7ae401
ENH: refactored previous commit to make it more Pythonic (With prev commit closes gh-86, gh-81)
12 years ago
David Engeset
6288ec2757
Added in command option to unban and IP, just like using 'banip'. Command looks like: fail2ban-client set <jail name> unbanip <ip>
12 years ago
Yaroslav Halchenko
8e64c281dd
BF: in code we should use MyTime wrapper instead of time module directly
...
to allow for some tests to work correctly
12 years ago
Yaroslav Halchenko
09355663f7
BF: (python 2.4) -- access to staticmethod should go via Class
...
TODO: get away from using all those staticmethods in f2b
12 years ago
Yaroslav Halchenko
5becaf8ef2
BF: (python 2.[45]) store backends names in a list to use .index later on (Closes gh-83)
...
.index() got into tuple's API only in 2.6
12 years ago
Yaroslav Halchenko
9510619b7b
ENH: minor -- print out why skipping a backend while testing
12 years ago
Yaroslav Halchenko
652b5a77e0
BF: fixing current version string to contain the patch index, i.e. ".1" Thanks Fabian Fischer
12 years ago
Yaroslav Halchenko
83109bce14
BF: escape the content of <matches> since its value could contain arbitrary symbols
12 years ago
Yaroslav Halchenko
6ee2c0a014
DOC: untabified for proper formatting + trailing spaces
12 years ago
Yaroslav Halchenko
282724a7f9
ENH: join both failregex for lighttpd-auth into a single one
...
they are close in meaning
should provide a slight run-time performance benefit
12 years ago
Yaroslav Halchenko
cc5d410004
Merge pull request #77 from sciunto/lightty
...
Lighttpd: support auth.backend = "htdigest"
12 years ago
François Boulogne
958a1b0a40
Lighttpd: support auth.backend = "htdigest"
12 years ago
Yaroslav Halchenko
2a225aa6ee
Added a warning within "complaint.conf" action about care with enabling it
12 years ago
Yaroslav Halchenko
2d66f31ef5
ENH: instead of "Invalid command" warning log exception why command failed
12 years ago
Yaroslav Halchenko
0b5c66fb59
Changelog for the fix -- will rerelease 0.8.7.1
12 years ago
Yaroslav Halchenko
6b7544a63a
BF: removed sneaked a commented out sys.path.insert
12 years ago
Yaroslav Halchenko
c06c504a8e
Adjusted changelog to reflect the last change
12 years ago
Yaroslav Halchenko
2082fee7b1
ENH: match possibly present "pam_unix(sshd:auth):" portion for sshd ( Closes : #648020 )
12 years ago
Yaroslav Halchenko
2b885e07f4
Adjusted changelog to reflect the last change
12 years ago
Yaroslav Halchenko
6ad55f64b3
ENH: add wu-ftpd failregex for use against syslog ( Closes : #514239 )
12 years ago
Yaroslav Halchenko
a512ea47d2
Adjusted changelog to reflect the last change
12 years ago
Yaroslav Halchenko
80b191c7fd
BF: anchor chain name in actioncheck's for iptables actions ( Closes : #672228 )
12 years ago
Yaroslav Halchenko
a3b242d6dd
BF: inline comments must use ; not # -- recidive jail
12 years ago
Yaroslav Halchenko
99c0caa9cc
Boosted version to 0.8.7 + few more comments
12 years ago
Yaroslav Halchenko
da752aff14
perspective changelog for 0.8.7
...
Conflicts:
ChangeLog
12 years ago
Yaroslav Halchenko
6495942550
DOC: minor (untabify, utf8) for ChangeLog
12 years ago
Yaroslav Halchenko
dca5634717
Merge branch '_enh/test_backends' -- fixing inotify backend, RF backends, unittests
...
* _enh/test_backends:
RF: reordered tests + enabled gamin now that its fix is pending in Debian
ENH+BF: filtergamin -- to be more inline with current design of filterinotify
ENH: 1 more sleep_4_poll to guarantee difference in time stamp
ENH: few more delays for cases relying on time stamps
ENH: tests much more robust now across pythons 2.4 -- 2.7
BF+RF: pyinotify refreshes watcher upon CREATE, unified/simplified *(add|del)LogPath among *Filters
ENH: fail2ban-testcases -- custom logging format to ease debugging, non-0 exit code in case of failure
ENH: Filter's testcases -- rename, del + list again --- a bit unstable, might still fail from time to time
BF: pyinotify -- monitor the parent directory for IN_CREATE + process freshly added file (Closes gh-44)
ENH: first working unittest for checking polling and inotify backends
RF/BF: just use pyinotify.ThreadedNotifier thread in filterpyinotify
RF: filter.py -- single readline in a loop
ENH: FilterPoll -- adjusted some msgs + allowed to operate without jail (for testing)
Minor additional comment to DEVELOP
ENH: extended test LogfileMonitor
13 years ago
Yaroslav Halchenko
481b1530d6
RF: reordered tests + enabled gamin now that its fix is pending in Debian
...
reference: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=542361
13 years ago
Yaroslav Halchenko
c6f5d854d3
ENH+BF: filtergamin -- to be more inline with current design of filterinotify
13 years ago
Yaroslav Halchenko
337f3f6f7b
ENH: 1 more sleep_4_poll to guarantee difference in time stamp
13 years ago
Yaroslav Halchenko
e9964846fa
ENH: few more delays for cases relying on time stamps
13 years ago
Yaroslav Halchenko
c0c1232c5f
Merge branch 'master' into _enh/test_backends
...
* master:
Ask users to report bugs to github's issues
Replace "|" with "_" in ipmasq-ZZZzzz|fail2ban.rul (Closes gh-66)
13 years ago
Yaroslav Halchenko
a1a67d34a9
ENH: tests much more robust now across pythons 2.4 -- 2.7
...
* needed additional sleeps for polling filter since that one relies on
time-stamps and too rapid changes would not be caught by the
PollFilter
* in python 2.4, time stamps are up to a second (int's) so sleeps longer
* test_new_bogus_file -- just to make sure that addition of new files
does not alter our monitoring
13 years ago
Yaroslav Halchenko
d9248a6cf8
BF+RF: pyinotify refreshes watcher upon CREATE, unified/simplified *(add|del)LogPath among *Filters
...
* all of the *Filters had too much of common logic in their *LogPath
methods, which is now handled by FileFilter and derived classes only
add custom actions in corresponding _(add|del)LogPath methods
pyinotify:
* upon CREATE event:
- unknown files should not be handled at all
- "watcher" for the monitored files should be recreated.
Lead to adding _(add|del)FileWatcher helper methods
* callback now obtains full event to judge what to do
13 years ago
Yaroslav Halchenko
b33ae8c194
Ask users to report bugs to github's issues
13 years ago
Yaroslav Halchenko
08564bda1a
ENH: fail2ban-testcases -- custom logging format to ease debugging, non-0 exit code in case of failure
13 years ago
Yaroslav Halchenko
6ac9fd5d26
ENH: Filter's testcases -- rename, del + list again --- a bit unstable, might still fail from time to time
13 years ago
Yaroslav Halchenko
3c95121a8b
BF: pyinotify -- monitor the parent directory for IN_CREATE + process freshly added file (Closes gh-44)
13 years ago
Yaroslav Halchenko
60260bce3d
ENH: first working unittest for checking polling and inotify backends
13 years ago
Yaroslav Halchenko
baa09098f0
RF/BF: just use pyinotify.ThreadedNotifier thread in filterpyinotify
...
that seems also to overcome the problem of often locking upon stop()
13 years ago
Yaroslav Halchenko
25674a95f8
RF: filter.py -- single readline in a loop
13 years ago
Yaroslav Halchenko
b3614d4ea2
ENH: FilterPoll -- adjusted some msgs + allowed to operate without jail (for testing)
13 years ago
Yaroslav Halchenko
42523dce92
Minor additional comment to DEVELOP
13 years ago
Yaroslav Halchenko
47e956bc8e
Replace "|" with "_" in ipmasq-ZZZzzz|fail2ban.rul (Closes gh-66)
...
Surprise -- that is for Windows compatibility
13 years ago