476 Commits (7b76322898327447f0b2c7dbba4fc29ed1288558)

Author	SHA1	Message	Date
Jisoo Park	2e7b8adb3b	Fix sieve filter to use correct option	10 years ago
Yaroslav Halchenko	f9cfbd66e6	Merge pull request #771 from szepeviktor/patch-1 ... named users + smtp auth probes	10 years ago
Szépe Viktor	143a55bf26	Update courier-smtp.conf	10 years ago
Szépe Viktor	d757ef584f	Update courier-smtp.conf	11 years ago
Szépe Viktor	a786e8a29b	named users + smtp atuh probes	11 years ago
Cyril Roos	add8e61036	Added Directadmin filter, jail and log test	11 years ago
Steven Hiscocks	2d54161696	Merge branch 'kwirk/harmonize-log-msgs' ... Conflicts: ChangeLog - Keep all additions	11 years ago
Steven Hiscocks	94232d7c31	Merge pull request #726 from pmarrapese/master ... Minor improvement to sshd filter	11 years ago
Yaroslav Halchenko	994fe77e59	ENH: make oracleims failregex better anchored (more explicit)	11 years ago
JoelSnyder	5165d2f6ea	Update oracleims.conf to be 'less greedy' ... This assumes that the protocol is always a string, which it always is, and that the other four fields in the "tr" are always numeric (which they always are). See port_access documentation at http://docs.oracle.com/cd/E19563-01/819-4428/bgaur/index.html	11 years ago
Steven Hiscocks	e8131475cd	ENH: Realign and harmonise log messages with getF2BLogger helper	11 years ago
JoelSnyder	9b7c35810a	Create oracleims.conf in filter.d for new filter ... Created oracleims.conf to catch messages from Sun/Oracle Communications Messaging Server v6.3 and above (including v7)	11 years ago
pmarrapese	96918acee4	more explicit match for sshd filter & added test	11 years ago
pmarrapese	46d6e93800	adjusted sshd filter regex to catch more verbose lines	11 years ago
Steven Hiscocks	77ba065571	Merge pull request #697 from jhmartin/monit_admin_hack ... Block brute-force attempts against the Monit gui	11 years ago
Steven Hiscocks	bc10b64c69	ENH: Match non "Bye Bye" for sshd locked accounts failregex	11 years ago
Jason Martin	9c3cb31862	Even stricter monit regex, now covers entire line	11 years ago
Jason Martin	72bfd14330	Tidy up filter.d/monit.conf, make regex more complete. ... Add ChangeLog / THANKS entry. Add test cases.	11 years ago
Steven Hiscocks	03d90c2f42	BF: recidive filter and samples at wrong log level: WARNING->NOTICE	11 years ago
Jason Martin	7d112430ca	Block brute-force attempts against the Monit gui	11 years ago
Yaroslav Halchenko	5bccec61e4	ENH: adding pruned with previous merge trailing \s* in nginx filter	11 years ago
Yung-Chin Oei	941a38ea8e	nginx-http-auth: match when "referrer" is present ... A sample log-line is provided. The updated regex successfully matches this line. Signed-off-by: Yung-Chin Oei <yungchin@yungchin.nl>	11 years ago
yungchin	6e8c1b2871	nginx-http-auth filter: match server_name = "" ... As documented at http://nginx.org/en/docs/http/server_names.html#miscellaneous_names "If no server_name is defined in a server block then nginx uses the empty name as the server name." This regex change allows us to match error output for such a configuration. The log line added to the tests was lifted from our logs verbatim; it did not match without the patched regex. Signed-off-by: Yung-Chin Oei <yungchin@yungchin.nl>	11 years ago
Ruben Kerkhof	1695d5c076	Fix a few typos ... Found with https://github.com/lucasdemarchi/codespell Signed-off-by: Ruben Kerkhof <ruben@rubenkerkhof.com>	11 years ago
Steven Hiscocks	6c5a978d6f	BF: journalmatch for recidive should be NOTICE level not WARNING	11 years ago
Daniel Black	476d79d3cc	ENH: asterisk filter to support syslog format	11 years ago
Daniel Black	50d938e0bf	MRG: merge filter sendmail-spam into sendmail-reject	11 years ago
Daniel Black	cc8ec826c5	MRG: from master 2014-03-02	11 years ago
Daniel Black	853bed8e4f	ENH: more sendmail-reject filter items thanks to fab23	11 years ago
Daniel Black	d0ec09a3b5	BF: move to right location	11 years ago
Daniel Black	c10cc20928	ENH: rename sendmail-spam to sendmail-reject	11 years ago
Daniel Black	d34569fb8d	BF: email address as arg1 in sendmail filters	11 years ago
Daniel Black	72c84fe9b0	ENH: wider regex for RBL and sendmail-spam	11 years ago
Daniel Black	3d776afbb0	ENH: add filter for sendmail-{auth,spam}. Closes gh-20	11 years ago
Steven Hiscocks	f68d85a6ac	Merge branch 'master' into 0.9 ... Conflicts: ChangeLog Spelling correction of 0.8.13 fixed in master config/jail.conf Added nagios and duplicate php-url removal in master Just nagios added, duplicate not issue in 0.9	11 years ago
Daniel Black	c701ac9276	DOC: document LogLevel requirement for "Connection from" regex"	11 years ago
Daniel Black	5f4d0ed576	ENH: ssh filter - "Disconnecting: Too many authentication failures.." matching Connection log message	11 years ago
Ivo Truxa	f5f434f846	removing the second failregex ... The second failregex was supposed to catch an error concerning an ACL denial over IPv6, but this message is no more generated by the nrpe version (v2.15) that introduced the IPv6 support, so the first failregex seems to be sufficient.	11 years ago
Ivo Truxa	a71bb89ccd	removing a dot (typo) ... The dot at the ignoregex did not belong there. Somehow it was added during the copying and pasting. Thanks for reporting it, I did not see it. Otherwise, empty ignoregexes are in all filters, and if they are missing, fail2ban client shows warnings when starting the filter, which I prefer avoiding.	11 years ago
Ivo Truxa	c91fda8619	ENH: Nagios filter ... Sample log for the first failregex is available in the testcases. No example available for the IPv6 denial yet.	11 years ago
Daniel Black	ef82eac790	DOC: openssh real protection is pubkey	11 years ago
Daniel Black	59b9045e88	MRG: from master 2014-02-02	11 years ago
Daniel Black	273b2f45a3	MRG: remove the "no auth attempts" as per aseques gh-600	11 years ago
Daniel Black	9b614ce486	ENH: dovecot filter enhancements	11 years ago
Joan	84617fa6da	Fixed a failing case	11 years ago
Joan	08171ba52f	Removed the -no auth attempts- from the triggers because of lots of FP	11 years ago
Daniel Black	256c732bcd	BF/ENH: filter pure-ftpd - re-add _daemon. Add translations ... _daemon was accidently removed in 89fd792dfb Added translations from source code	11 years ago
Daniel Black	c8ae064b79	ENH: tighten regex and change failJSON to support timezone. Closes gh-583	11 years ago
Daniel Black	2063d96e59	MRG: import Lars' PR for tine20	11 years ago
Steven Hiscocks	a0f39255bc	BF: Kerio log datepattern fix for recent datepattern full regex merge	11 years ago