Szépe Viktor
143a55bf26
Update courier-smtp.conf
10 years ago
Yaroslav Halchenko
2d7f2fa33f
Merge pull request #756 from marclaporte/patch-1
...
typo
10 years ago
Yaroslav Halchenko
45c1095606
Merge pull request #750 from niorg/master
...
Added Directadmin filter, jail and log test
10 years ago
Yaroslav Halchenko
3339dc8d84
ENH: cyrus-imap -- catch also 'user not found' attempts
11 years ago
Yaroslav Halchenko
3e5c598b79
BF: cyrus-imaps -- catch also for secured daemons
11 years ago
Szépe Viktor
d757ef584f
Update courier-smtp.conf
11 years ago
Szépe Viktor
a786e8a29b
named users + smtp atuh probes
11 years ago
Pierre-Alain Dupont
3d7504c19e
Forwards bantime to action scripts
...
That way, ipset and afctl will use a real timeout and not default to a fixed value for all jails
11 years ago
leftyfb
cba570cabd
Updated comments
11 years ago
leftyfb
5471e99ebe
Added cloudflare action
11 years ago
Yaroslav Halchenko
6cddc65cee
BF: path to exim's mainlog on Fedora (Thanks Frantisek Sumsal) + changelog entry
11 years ago
Yaroslav Halchenko
43950d8b7e
BF: fix path to the exim log on Debian systems (/var/log/exim4)
11 years ago
Marc Laporte
3777591ab0
typo
11 years ago
Cyril Roos
add8e61036
Added Directadmin filter, jail and log test
11 years ago
Yaroslav Halchenko
0adb10f653
Merge branch 'ainfo-copy' of https://github.com/kwirk/fail2ban
...
* 'ainfo-copy' of https://github.com/kwirk/fail2ban :
TST: actions modifying aInfo test more robust
TST: Test for actions modifying (un)ban aInfo
BF: aInfo could be modified by actions, causing unexpected behaviour
11 years ago
Steven Hiscocks
2d54161696
Merge branch 'kwirk/harmonize-log-msgs'
...
Conflicts:
ChangeLog - Keep all additions
11 years ago
Steven Hiscocks
76a5633ff9
Merge pull request #739 from ranvis/enh-iptables-ipsets
...
ENH: Add <chain> to iptables-ipsets.
11 years ago
SATO Kentaro
65ff3e9604
ENH: Introduce iptables-common.conf.
11 years ago
Steven Hiscocks
94232d7c31
Merge pull request #726 from pmarrapese/master
...
Minor improvement to sshd filter
11 years ago
Steven Hiscocks
8268c1641f
BF: aInfo could be modified by actions, causing unexpected behaviour
...
A separate copy of aInfo is passed to each action
11 years ago
Yaroslav Halchenko
93d5c363ca
Merge branch 'enh/oracle_msg_server'
...
* enh/oracle_msg_server:
ENH: make oracleims failregex better anchored (more explicit)
Update oracleims.conf to be 'less greedy'
Update THANKS
Update jail.conf for oracleims filter.
Create test for oracleims filter
Create oracleims.conf in filter.d for new filter
11 years ago
SATO Kentaro
1e1c4ac62a
ENH: Add <chain> to iptables-ipsets.
11 years ago
Yaroslav Halchenko
994fe77e59
ENH: make oracleims failregex better anchored (more explicit)
11 years ago
JoelSnyder
5165d2f6ea
Update oracleims.conf to be 'less greedy'
...
This assumes that the protocol is always a string, which it always is, and that the other four fields in the "tr" are always numeric (which they always are). See port_access documentation at http://docs.oracle.com/cd/E19563-01/819-4428/bgaur/index.html
11 years ago
JoelSnyder
70ed93d8cc
Update jail.conf for oracleims filter.
...
This is the jail.conf update. Hopefully this will go into pull request #734 .
11 years ago
Steven Hiscocks
e8131475cd
ENH: Realign and harmonise log messages with getF2BLogger helper
11 years ago
Steven Hiscocks
db023be09b
BF: Fix bad syntax in badips.py action
...
Taken from https://bugzilla.redhat.com/attachment.cgi?id=895966&action=diff
11 years ago
JoelSnyder
9b7c35810a
Create oracleims.conf in filter.d for new filter
...
Created oracleims.conf to catch messages from Sun/Oracle Communications Messaging Server v6.3 and above (including v7)
11 years ago
pmarrapese
96918acee4
more explicit match for sshd filter & added test
11 years ago
pmarrapese
46d6e93800
adjusted sshd filter regex to catch more verbose lines
11 years ago
Steven Hiscocks
77ba065571
Merge pull request #697 from jhmartin/monit_admin_hack
...
Block brute-force attempts against the Monit gui
11 years ago
Steven Hiscocks
bc10b64c69
ENH: Match non "Bye Bye" for sshd locked accounts failregex
11 years ago
Yaroslav Halchenko
596b819bdc
DOC: minor -- tabify docstring in badips.py action
11 years ago
Jason Martin
9c3cb31862
Even stricter monit regex, now covers entire line
11 years ago
Jason Martin
72bfd14330
Tidy up filter.d/monit.conf, make regex more complete.
...
Add ChangeLog / THANKS entry.
Add test cases.
11 years ago
Steven Hiscocks
03d90c2f42
BF: recidive filter and samples at wrong log level: WARNING->NOTICE
11 years ago
Jason Martin
7d112430ca
Block brute-force attempts against the Monit gui
11 years ago
Steven Hiscocks
d4427e5a76
Merge pull request #683 from yarikoptic/fix/682
...
Fix typos referencing paths-common, provide empty defaults for syslog_ log files (Partial fix to #682 )
11 years ago
Steven Hiscocks
9fcb92524e
BF: badips.py action logging of exc_info on debug typo
11 years ago
Yaroslav Halchenko
8bcb25c3a2
defining empty defaults for syslog_ log targets for common (Thanks @chtheis, partial fix to #682 )
11 years ago
Yaroslav Halchenko
7dcea0d48d
typos of paths-common (Thanks @chtheis, partial fix to #682 )
11 years ago
Yaroslav Halchenko
5bccec61e4
ENH: adding pruned with previous merge trailing \s* in nginx filter
11 years ago
Yung-Chin Oei
941a38ea8e
nginx-http-auth: match when "referrer" is present
...
A sample log-line is provided. The updated regex successfully matches
this line.
Signed-off-by: Yung-Chin Oei <yungchin@yungchin.nl>
11 years ago
shawn
d7e888238c
Correct grammar
11 years ago
yungchin
6e8c1b2871
nginx-http-auth filter: match server_name = ""
...
As documented at
http://nginx.org/en/docs/http/server_names.html#miscellaneous_names "If
no server_name is defined in a server block then nginx uses the empty
name as the server name." This regex change allows us to match error
output for such a configuration.
The log line added to the tests was lifted from our logs verbatim; it
did not match without the patched regex.
Signed-off-by: Yung-Chin Oei <yungchin@yungchin.nl>
11 years ago
yungchin
3a155ed2e0
Update comments in shorewall.conf for new settings
11 years ago
Ruben Kerkhof
1c36da9df9
Fix 2 more typos that codespell didn't catch
11 years ago
Ruben Kerkhof
1695d5c076
Fix a few typos
...
Found with https://github.com/lucasdemarchi/codespell
Signed-off-by: Ruben Kerkhof <ruben@rubenkerkhof.com>
11 years ago
Manuel Rüger
5a1ad75114
Fix typo in comment
11 years ago
Steven Hiscocks
41cbbbc248
BF: Remove unused imports and variables.
...
All highlighted by using pyflakes.
11 years ago
Steven Hiscocks
16125ec81a
BF: badips.py action methods not static due to use of self._logSys
11 years ago
Steven Hiscocks
6c5a978d6f
BF: journalmatch for recidive should be NOTICE level not WARNING
11 years ago
Daniel Black
7611096162
Merge branch '0.9' of https://github.com/fail2ban/fail2ban into 0.9
11 years ago
Daniel Black
aa7e8fb9ce
DOC: Credits. close gh-644
11 years ago
Steven Hiscocks
9e374b159e
ENH: Allow setting of badips.py key for reporting and blacklisting
11 years ago
Steven Hiscocks
de43d1d6d5
ENH: Change badips.py default score to "3"
...
As per recommendation from Amy from badips.com
11 years ago
Daniel Black
476d79d3cc
ENH: asterisk filter to support syslog format
11 years ago
Daniel Black
415f187644
ENH: sendmail-reject for all smtp ports.
11 years ago
Steven Hiscocks
a78a9d282c
DOC: Document that badips.py action should be last action for jail
11 years ago
Steven Hiscocks
0222ff4677
Merge branch 'badips-blacklist' into 0.9
...
Conflicts:
ChangeLog
- entires added in both branches.
Change:
config/action.d/badips.py
- jail.getName() changed to jail.name
11 years ago
Steven Hiscocks
0c63d0061a
DOC: Add documentation for badips.py action
11 years ago
Steven Hiscocks
dfb46cfda6
BF: Require Python 2.7+ for badips.py action
11 years ago
Daniel Black
df882feb16
ENH: expand sendmail-reject jail to 465,submission
11 years ago
Daniel Black
ef29d7bd29
ENH: paths-{common,distro} normalisation
11 years ago
Daniel Black
50d938e0bf
MRG: merge filter sendmail-spam into sendmail-reject
11 years ago
Daniel Black
666fd5eceb
ENH: purge excessive jail variations
11 years ago
Daniel Black
69f5baae36
ENH: jail.conf to use syslog_mail
11 years ago
Daniel Black
2d45becb0e
Merge branch '0.9' into distro-paths-gh-315
11 years ago
Daniel Black
2d8c497ce5
ENH: highlight missing osx paths
11 years ago
Daniel Black
cc8ec826c5
MRG: from master 2014-03-02
11 years ago
Daniel Black
853bed8e4f
ENH: more sendmail-reject filter items thanks to fab23
11 years ago
Daniel Black
d0ec09a3b5
BF: move to right location
11 years ago
Daniel Black
c10cc20928
ENH: rename sendmail-spam to sendmail-reject
11 years ago
Daniel Black
d34569fb8d
BF: email address as arg1 in sendmail filters
11 years ago
Daniel Black
72c84fe9b0
ENH: wider regex for RBL and sendmail-spam
11 years ago
Daniel Black
fe1725c603
BF: add jail.conf definitions for sendmail* filters
11 years ago
Daniel Black
3d776afbb0
ENH: add filter for sendmail-{auth,spam}. Closes gh-20
11 years ago
Steven Hiscocks
a9b9c6ea03
Merge branch 'logging' into 0.9
...
Conflicts:
fail2ban/server/actions.py
jail getName()->name
fail2ban/server/filter.py
jail getName()->name
11 years ago
Steven Hiscocks
df8d700d17
RF: Refactor Jail and JailThread
...
Includes:
- documentation to new format and use of properties
- change isActive->is_active as former no longer documented for
python3, and later introduction and documented in python2.6
- status formatter in beautifier somewhat more automatically
formatted; no changes are required for additional status elements
- JailThread now set to active within `start` method, complimenting
`stop` method
11 years ago
Steven Hiscocks
a4731ef988
DOC: Correct log levels
11 years ago
Steven Hiscocks
5630c56c75
ENH: Change logging levels and make info more verbose
11 years ago
Daniel Black
9be22a96a6
Merge pull request #614 from kwirk/complain-abusix
...
BF: Use abusix Abuse Contact DB to get more accurate abuse addresses
11 years ago
Daniel Black
cc463aa60d
Merge pull request #620 from kwirk/xarf-tweaks
...
BF: Fix misplaced ";", and duplicate {ip,}matches
11 years ago
Daniel Black
b6f9b9161d
BF: remove self reference
11 years ago
Daniel Black
a044517cb7
MRG: from master to 0.9 2014-02-20
11 years ago
Daniel Black
79e6543eca
Merge branch '0.9' into distro-paths-gh-315
11 years ago
Daniel Black
83266eb668
ENH: framework for distro paths
11 years ago
Steven Hiscocks
8c5525163b
BF: Fix misplaced ";", and duplicate {ip,}matches
11 years ago
Steven Hiscocks
997729e274
BF: Fix complain action for multiple recipients and misplaced ";"
11 years ago
Steven Hiscocks
7c76f7f204
BF: $EUID not avilable in all shells, replaced with `id -u` in xt_recent
11 years ago
Steven Hiscocks
2a37ee2fb7
ENH: Add root user check in xt_recent, and add missing actionstop
...
Thanks to Helmut Grohne on IRC for suggestion
11 years ago
Steven Hiscocks
5c7630c4be
ENH: Allow separate blacklist category for badips.py action
11 years ago
Steven Hiscocks
cf81ddd8e2
BF: Add error handling in badips.py action
11 years ago
Steven Hiscocks
31f4ea59cb
BF: Use abusix Abuse Contact DB to get more accurate abuse addresses
...
Taken from xarf-login-attack action from 0.9 branch by Daniel Black
11 years ago
Steven Hiscocks
f68d85a6ac
Merge branch 'master' into 0.9
...
Conflicts:
ChangeLog
Spelling correction of 0.8.13 fixed in master
config/jail.conf
Added nagios and duplicate php-url removal in master
Just nagios added, duplicate not issue in 0.9
11 years ago
Daniel Black
c701ac9276
DOC: document LogLevel requirement for "Connection from" regex"
11 years ago
Daniel Black
5f4d0ed576
ENH: ssh filter - "Disconnecting: Too many authentication failures.." matching Connection log message
11 years ago
Aarón Nieves Fernández
993b7d3dfb
Duplicate jail "php-url-fopen"
11 years ago
Steven Hiscocks
dff8909473
ENH: Add badips.com reporting and blacklisting action (python based)
11 years ago
Ivo Truxa
c207ad6058
removing ignoreip at [nagios]
...
I removed the ignoreip setting from the nagios section. As pointed out, it is redundant here. Nagios server, under normal circumstances should not trigger any access errors, and would be included in the global ignoreips anyway.
11 years ago