sebres
cfc3979c84
Merge branch '0.10' with 'socket-stability-fix'
7 years ago
sebres
1bdda6c8eb
cache coverage
7 years ago
sebres
96836cb199
fix several errors (shutdown in test-cases during stop communication, better error handling by unpickle/deserialization, etc)
7 years ago
sebres
29bedd70d5
socket stability and coverage: cherry picked from 0.11 version (avoid many sporadic unhandled exceptions)
7 years ago
Sergey G. Brester
9f969e7aab
Merge pull request #2062 from MatthieuBarbu/patch-2
...
filter.d/sshd.conf: fixed normal and ddos-mode regex (extended with port)
7 years ago
sebres
caa2bdfee6
amendment for gh-2061: it looks like the port was added here also
7 years ago
sebres
a3bcbe2d1b
backwards-compatibility, test-cases and ChangeLog update
7 years ago
MatthieuBarbu
6b5516b851
fix sshd rule #2
...
in line 58, rule don't match with "%(__suff)s" but work fine if I replace with "%(__on_port_opt)s"
Debian 9 stretch : fail2ban 0.10.3
7 years ago
Sergey G. Brester
e9a43f739c
Merge pull request #2061 from MatthieuBarbu/patch-1
...
fix sshd rule (space before "11:" is optional now)
7 years ago
sebres
1d7aa2ff21
filter.d/sshd.conf: rewrite fix (for new ssh log-format) backwards compatible + test-cases extended to cover both cases
7 years ago
MatthieuBarbu
9f5c873526
fix sshd rule
...
just remove the space before ":11" line 52 because don't match on my Debian 9 stretch...
I don't know if this is wrong on all OS
7 years ago
sebres
5f021aa648
shutdown sockets before close, avoid socket leakage by use of the explicit socket close in async_chat;
...
better error handling with error counting, differentiate special case ([Errno 24] Too many open files), with resulting stop of the server
(avoid flood the log file, closes gh-991 and similar issues);
restored auto-garbage, because of non-reference-counting python's (like pypy), otherwise it may leak there on objects like unix-socket, etc.
7 years ago
sebres
fa520f36c3
stability test-cases fix: avoid rare sporadic error on start of server (threaded in foreground);
...
additionally show the log output of the thread-server in case of any error there.
7 years ago
sebres
8c291cad38
filter.d/asterisk.conf: fixed failregex prefix by log over remote syslog server (gh-2060)
7 years ago
Ben RUBSON
b112250ef0
(Free)BSD IPFW does not allow 2 identical rules ( #2054 )
...
ipfw actionban fixed to allow same rule added several times (and actionunban to ignore error by deletion of missing rule)
7 years ago
Ben RUBSON
857767f04b
Add 'any' badips.py bancategory ( #2056 )
...
action.d/badips.py: allow `any` as bancategory to retrieve IPs from all categories
7 years ago
sebres
07fcb24ff6
Merge pull request #2057 from benrubson/https
...
Use httpS with badips
7 years ago
Sergey G. Brester
117dcca414
Merge pull request #2059 from benrubson/str
...
badips.py, solve a str() issue - expected string, IPAddr found
7 years ago
sebres
933670d034
pragma: no cover - availability (once after error case only)
7 years ago
sebres
f52c67238a
action.d/badips.py: code review, ban command covered, debug log-messages, etc;
7 years ago
sebres
095a909c84
action.d/badips.py: increases score in test-cases (5 now, ssh/3 returns to large list, which can cause timeout if badips server to busy);
7 years ago
benrubson
8ed892b8bb
Changelog
7 years ago
benrubson
fce2a50165
badips.py, solve a str() issue under FreeBSD
7 years ago
benrubson
9a8add0ef0
changelog
7 years ago
benrubson
e2665d39fd
Use httpS with badips
7 years ago
Sergey G. Brester
7070664772
Merge pull request #2048 from sebres/exim-too-many-errors
...
Exim-filter: too many errors
7 years ago
Sergey G. Brester
879f580c9a
Update ChangeLog
7 years ago
sebres
e636567d23
filter.d/exim.conf: failregex extended with SMTP call dropped: too many syntax or protocol errors.
7 years ago
sebres
19a5a2f8c0
filter.d/murmur.conf: fixed detection of failures reading from journal (systemd-backend only):
...
- extended with optional prefix for the systemd-journal (with second date-pattern as optional match);
- added `journalmatch` filtering;
closes gh-2043
7 years ago
sebres
3e15343343
fail2ban-regex: bug fixed, if running over systemd-journal and `journalmatch` missing in filter.
7 years ago
sebres
98f4d70371
fixed cymru-info resolved to answers with multiple data-records (as comma-separated list now)
7 years ago
Sergey G. Brester
3b8b9c4acf
README: extended systemd-prerequirements: python-systemd package
7 years ago
sebres
f1661d35ea
fix sporadic error, wait for shutdown/exit messages by assert-check, better prevention of dual (parallel) stop
7 years ago
sebres
2c03f5ad28
simple syntax change (wrong escape in string): no functional changes
7 years ago
Sergey G. Brester
3a1c386958
Update ChangeLog
7 years ago
Sergey G. Brester
0e0e478483
Merge pull request #2038 from sebres/long-epoch-and-epoch-pattern
...
Long epoch and epoch pattern
7 years ago
sebres
dcbf904876
allow to parse milliseconds as float + more test cases;
...
normalize capturing with epoch-pattern match - similar to `{DATE}` should capture and cut out the whole pattern match from the log-line;
7 years ago
sebres
3e8098d427
python 3.x compatibility: fix replacement string (may fail with errors like `bad escape \d ...`, etc)
7 years ago
sebres
442b0b1c59
extends date-detector with long epoch (LEPOCH) to parse milliseconds/microseconds posix-dates;
...
provide opportunity to specify own regex-pattern to match epoch date-time, e. g. "^\[{EPOCH}\]";
closes gh-2029
7 years ago
Sergey G. Brester
01f3df03c8
Merge pull request #2034 from sebres/0.10_/fix-gh-2028
...
0.10 - extend section-related interpolation, fix gh-2028
7 years ago
sebres
0ed11817c1
restore coverage: no cover for normally unreachable scopes (only if test cases failed)
7 years ago
sebres
0be0e43d47
amend to 03b577d7b92a120e325abe20a99b6956a7e0657c: add new-line after matches via tag `<br>` without usage of interim variable
7 years ago
sebres
03b577d7b9
action.d/blocklist_de.conf: fixed tag substitution (in 0.10 it can be variables supplied via shell-arguments), expand `<matches>` with trailing newline;
...
tests extended;
closes gh-2028
7 years ago
sebres
435f359a06
allow substitute section-related parameters like `<Definition/option>` in all config-readers as well as during substitute after supply of init arguments;
...
test cases extended;
7 years ago
sebres
f547a7c7b1
LogCaptureTestCase: use almost non-blocking handling by getvalue/_is_logged (especially important in tests with waiting for logged via `assertLogged(..., wait=TO)`):
...
- try to acquire lock without blocking, if not possible - return cached/empty (max 5 times, otherwise do lock);
- minimized time of the lock of messages list;
- avoid sporadic dead-locking during cross lock together with lock within handling of self._strm.
7 years ago
sebres
5f3ba289d6
restore code coverage (decreased in latest "fixes") - no cover for unreachable cases;
7 years ago
sebres
ac9d5f61e7
rewrite keywords reserved in python 3.7 (`async` -> `nonsync`)
7 years ago
Sergey G. Brester
6b7cca07ae
Merge pull request #2025 from yarikoptic/bf-0.10-debian
...
A number of fixes toward making tests pass while building Debian pkg for 0.10.2
7 years ago
sebres
7a757645bb
introduces new decorator/conditional helper in order to skip some STOCK-related test-cases (if running outside of stock-config environment).
7 years ago
sebres
9af9ec25f5
allow to override use_stock_cfg values (used as default value now), e. g. actions rest filters only, reject d1afbb566f0304487b5d578b4aacef8e647ee74b
7 years ago