sebres
7e8575cc56
tests of fail2ban-regex extended to cover exec_command_line also;
...
Closes #1573
8 years ago
Serg G. Brester
733d0ef596
Merge pull request #1569 from sebres/_0.10/fix-fakegooglebot
...
fixes deprecated DNSUtils.IsValidIP in fakegooglebot ignore command
8 years ago
sebres
2d2d4cf185
amend to c2d2e79b0d48bf66b04c3772c2419f30a4b1f9db: fixed sporadically bug in getBanListExtendedCymruInfo:
...
except dns.resolver.NXDOMAIN:
UnboundLocalError: local variable 'dns' referenced before assignment
8 years ago
sebres
0ae932ba5e
setup fix for python3, bypass directories (__pycache__) created after ignore command was tested
8 years ago
sebres
fa8184d4cc
fixes deprecated DNSUtils.IsValidIP in fakegooglebot ignore command + test covered now;
...
Closes #1559
8 years ago
sebres
973ac9a45c
amend to c2d2e79b0d48bf66b04c3772c2419f30a4b1f9db: missing error variable in import block;
...
additionally fixes forgotten skip for cymru server case, if --no-network specified);
Closes #1568
8 years ago
sebres
c2d2e79b0d
ExtendedCymruInfo: better availability check (code review and timeout's);
...
max sleep time check of too long sleep increased to 1 second (typo fix)
8 years ago
sebres
ee1727ecca
Merge pull request #1563 from niklasf/fix-lazy-ipv6-regex (and sebres/fix-lazy-ipv6-regex) into 0.10
8 years ago
sebres
276759b6c2
ExtendedCymruInfo code review and availability check in test cases;
...
max sleep time check of too long sleep increased to 1 second
8 years ago
sebres
9bf8985e2a
nginx-limit-req.conf: more precise failregex (word-boundary if `<HOST>` should be non-greedy for some reasons)
8 years ago
sebres
06674bb989
use common regex for IP addresses (removed code duplication)
8 years ago
Serg G. Brester
ba9a88977f
Merge pull request #1562 from sebres/_0.10/fix-stability-and-speed
...
0.10/fix stability and speed optimization
8 years ago
sebres
8b0f6c5413
badips test cases check availability of badips service (and skip this tests if it not available)
8 years ago
sebres
9a7c753372
fixes method-related filter for tests of suite loaded with loadTestsFromName (they may be a suite self)
8 years ago
Niklas Fiekas
057f2f3c56
make the ipv6 host regex greedy
...
Previously the regex was lazily matching ``2606:2800:220:1:248:1893:25c8:1946``
as ``2606:2800:220:1:248:1893:25c8:1``.
8 years ago
sebres
77ec9df678
standardize and normalize verbosity parameters for fail2ban-regex / fail2ban-testcases (-v ... -vvvv, or --verbosity=0..4)
8 years ago
sebres
2cfaf845ca
standardize and normalize logging and verbosity formats, logging level etc between command lines (server, client, test-cases);
...
test cases could pass (so increase) verbosity to the client (and furthermore client to the server also), usable for debug purposes resp. simplifying read of the log-file;
custom and precise numeric log-levels can be given in test cases now;
8 years ago
sebres
62b8664175
speedup server start/stop (waiting for communicate, etc);
...
extend server socket with timeouts, extend ping with timeout parameter;
8 years ago
sebres
542419acab
filtertestcase: use shorter sleep (almost just for the context switch here)
8 years ago
sebres
b615ba49ff
disengage testExecuteTimeout test-case from -fast option, just make it faster (timeout shorter) in this case
8 years ago
sebres
b011cf17b2
increase performance of executeCmd (actions), thereby introduced new shorter interval for fast operations (leaves unchanged default wait operation intervals (sleep time, threshold interval) - for the same inertance, to save same system (load by many jails resp. log files);
...
extends wait_for with callable timeout (test case fixed);
8 years ago
sebres
310d4e224d
Merge branch master (0.9) into 0.10
8 years ago
Serg G. Brester
8e3e333d54
Update ChangeLog
8 years ago
Serg G. Brester
d9e1a4f547
Merge pull request #1556 from szepeviktor/master
...
Monit config: scripting is not supported in path
8 years ago
Serg G. Brester
a0d8581a2c
Merge pull request #1557 from sebres/_0.10/fix-reload-bug
...
0.10/reload-and-more: reload without restart, stability and performance fixes
8 years ago
sebres
5151c4fa6d
ChangeLog entries added
8 years ago
sebres
5e4fdb60c8
extended test-cases (coverage)
8 years ago
sebres
449c46aec4
extended test-cases (coverage)
8 years ago
sebres
004879b5b1
code review: switch MAX_TIME to 0X7FFFFFFFFFFF (is enough, because 4461763-th year, but better performance)
8 years ago
sebres
e00be5f308
Fixed sporadically error in testCymruInfoNxdomain, because of unsorted values:
...
```
AssertionError: Dictionaries differ:
{'country': ['unknown', 'nxdomain'], 'asn': ['4565', 'nxdomain'], 'rir': ['other', 'nxdomain']} !=
{'country': ['nxdomain', 'unknown'], 'asn': ['nxdomain', '4565'], 'rir': ['nxdomain', 'other']}
```
Added assertDictEqual for compatibility to early python versions (< 2.7);
8 years ago
sebres
e7fa74b989
smaller inertance inside test-cases (amend to d153555a07
with decreasing default wait operation that litle bit speedup test-cases)
8 years ago
sebres
ab0c28260b
switch down log level for some annoying messages to tracedebug or heavydebug (to 7 or even 5);
...
added verification of specified log-level before transmitting to the server;
numeric log-level allowed now in server (resp. fail2ban.conf);
8 years ago
Viktor Szépe
a406c6eb3a
By the author:
...
> Yes, scripting is not supported in path.
https://bitbucket.org/tildeslash/monit/issues/372/webadmin-shows-only-the-first-part-of#comment-27946048
8 years ago
sebres
48ebe3e735
FilterPyinotify: high cpu load fix - timeout for pyinotify must be set in milliseconds (our time values are floats contain seconds);
8 years ago
sebres
c0373a7158
repair typo bug in reloading for systemd-filter;
...
JailThread get method `join` for safe usage of it, also for not started threads (test-cases or in case of error), that will be used for cleanup resp. wait purposes also (see join of pyinotify-filter);
8 years ago
sebres
d153555a07
increase default wait operation (sleep time, threshold interval) - avowedly greater inertance, but fewer system load by many jails resp. log files;
...
waiting with `wait_for` extended with verifying of active flag;
implemented better error handling in some multi-threaded routines;
shutdown of jails rewritten (faster and safer, does not breaks shutdown process if some error occurred);
8 years ago
sebres
35ce1166b6
allows to update some configuration options (read with config-readers) with command line option, e. g.:
...
```bash
## start server with DEBUG log-level (ignore level read from fail2ban.conf):
fail2ban-client --loglevel DEBUG start
## or
fail2ban-server -c /cfg/path --loglevel DEBUG start
## keep server log-level by reload (without restart it)
fail2ban-client --loglevel DEBUG reload
## switch log-level back to INFO:
fail2ban-client set loglevel INFO
```
8 years ago
Serg G. Brester
28e286cd2d
Merge pull request #1551 from fail2ban/sebres-patch-fips-gh-1540
...
filter.py: FIPS compliant fix (use sha1 instead of md5 if not allowed)
8 years ago
sebres
0f1d1a0d4d
ChangeLog: FIPS compliant
8 years ago
Serg G. Brester
1071db2256
filter.py: easy-fix to use sha1 instead of md5 if its usage prohibited by some systems following strict standards (like FIPS)
...
closes gh-1540
8 years ago
Serg G. Brester
fad953ade6
Merge pull request #1544 from sebres/fix/vsftpd-gh-1543
...
filter.d/vsftpd.conf: optional reason part in message after FAIL LOGIN
8 years ago
sebres
20b92f3ead
fail2ban-regex: build replacement of `<HOST>` substitution corresponding parameter `usedns` - now also in fail2ban-regex (amend)
8 years ago
sebres
ebd864660a
normalize usage of preferred encoding (and decode any to string);
...
python 3.x compatibility (used uni_decode for string representation of stdout/stderr, unified test cases)
amend for #1542
8 years ago
sebres
e0347bb3a0
assertLogged extended with parameter wait (to wait up to specified timeout, before we throw assert exception) + test cases rewritten using that
8 years ago
sebres
a20f325f80
database: stability fix - repack cursor iterator as long as locked
8 years ago
sebres
f6197200a9
introduced new flag "banned" as property, used to recognize the ticket was really banned;
...
get/set restored flag functions rewritten to property "restored" similar to "banned";
several code optimizations and tests extensions;
8 years ago
sebres
2108216d33
file filter-backends: stability fix for sporadically errors - always close file handle, otherwise may be locked (prevent log-rotate, etc.)
8 years ago
sebres
4404642fa3
pyinotify-backend: stability fix for sporadically errors in multi-threaded environment (without lock)
8 years ago
sebres
8c4eebc3e3
reload actions amend, code review and test cases extended for update/start/stop of actions by reloading
8 years ago
sebres
9fb167b5e1
filter.d/vsftpd.conf: optional reason message after FAIL LOGIN, closes #1543
8 years ago