Yaroslav Halchenko
833f60a38a
Replacing word of caution with big fat warning and commenting out named-refused-udp completely ( Closes : #583364 )
2010-06-28 21:45:47 -04:00
Yaroslav Halchenko
d1b9e71173
Adding arno-iptables-firewall (no deprecation of ipmasq per Joey Hess mentioning, which still could be used on lenny systems)
2010-05-26 17:58:20 -04:00
Yaroslav Halchenko
3f898d7c05
BF: --install-layout=deb for setup.py + python (>= 2.5.4-1~) to fix install with python2.6 ( closes : #571213 )
2010-02-25 00:03:22 -05:00
Yaroslav Halchenko
efb1f57f62
actually boosting policy
2009-09-10 11:22:48 -04:00
Yaroslav Halchenko
472a7b31ce
BF: use "set logtartet" instead of "reload" while logrotate. Thanks J.M.Roth ( Closes : #537773 )
2009-09-10 11:05:56 -04:00
Yaroslav Halchenko
3dd16eeddf
BF: adjusted README.Debian - multiport is default ( closes : #545971 )
2009-09-10 09:09:01 -04:00
Yaroslav Halchenko
d2695899a0
actually removing fail2ban installed /var/run/fail2ban while building package
2009-07-09 01:48:43 -04:00
Yaroslav Halchenko
01a5faf131
BF: thanks lintian -- removing stale /var/run/fail2ban from dirs -- should be created by init script
2009-07-09 01:37:58 -04:00
Yaroslav Halchenko
8de0f450e9
Thanks lintian for catching a misspell in README.Debian
2009-07-09 01:36:46 -04:00
Yaroslav Halchenko
53066981af
boosted debhelper compatibility to 5
2009-07-09 01:36:03 -04:00
Yaroslav Halchenko
6197fb178c
Added a comment into Debian-shipped jail.conf about sasl logpath -- it might preferable to monitor warn.log in case of postfix
2009-07-09 00:48:05 -04:00
Yaroslav Halchenko
034f07ada6
Boosted policy to 3.8.2 -- no changed are due
2009-07-09 00:05:03 -04:00
Yaroslav Halchenko
8d07aa603e
fixed Vcs-git field
2009-07-09 00:00:26 -04:00
Yaroslav Halchenko
5fe12cc756
BF: added missing semicolon in a logging template for bind within jail.conf
2009-02-02 23:01:17 -05:00
Yaroslav Halchenko
de98375553
adjusted description of bantime/findtime in README.Debian ( closes : #507771 )
2009-01-18 11:56:20 -05:00
Yaroslav Halchenko
8ab68346b1
Boosted policy compliance to 3.8.0 (no changes needed)
2008-07-21 10:25:32 -04:00
Yaroslav Halchenko
a779bfc655
Adjusted vcs paths
2008-07-17 11:21:51 -04:00
Yaroslav Halchenko
32281ed1aa
BF: Assure that /var/run/fail2ban exists upon start (LP: #222804 , #223706 )
2008-05-06 10:43:57 -04:00
Yaroslav Halchenko
8207f166e1
BF: Recommends whois, which is used in some actions (LP: #213227 )
2008-04-07 10:24:09 -04:00
Yaroslav Halchenko
ef9148cff4
added dirs file to create /var/run/fail2ban
2008-03-05 23:54:30 -05:00
Yaroslav Halchenko
36f90e4622
CHANGELOG -> ChangeLog in rules
2008-03-05 23:32:42 -05:00
Yaroslav Halchenko
a88fd271c4
2 new jails: xinetd-fail, apache-overflows added to jails.conf
2008-03-05 23:29:36 -05:00
Yaroslav Halchenko
5d6d07508d
minor: adjusted comment for named jails to come closer to upstream
2008-03-05 23:18:04 -05:00
Yaroslav Halchenko
15ce210cd0
BF: apache-* jails -- authentication failures are recorded in *error.log files, thus paths were adjusted
2008-03-05 23:14:22 -05:00
Yaroslav Halchenko
940d7fa430
debian/watch: switched to git-import-orig
2008-03-05 20:18:50 -05:00
Yaroslav Halchenko
fc3a57b6c1
Confirms to policy 3.7.3 (no changes)
2008-02-08 01:23:34 -05:00
Yaroslav Halchenko
4b2bd7e776
Bye Bye dpatch: now everything is handled in git branches
2008-02-08 00:52:04 -05:00
Yaroslav Halchenko
a832ede291
removing patches from dpatch system since they are in branches now
2008-02-08 00:46:00 -05:00
Yaroslav Halchenko
996da9a3f0
added a comment to README.Debian and to the list of examples for ipmasq example file
2008-02-07 23:43:21 -05:00
Yaroslav Halchenko
0da36545d3
Fixed == bashism ( Closes : #464647 ). Thanks Raphael Geisser
2008-02-07 23:43:21 -05:00
Yaroslav Halchenko
fa21222c63
* Moved iptables into recommends since fail2ban can work without iptables
...
using some other action (e.g hosts.deny)
2007-11-23 12:49:15 -05:00
Yaroslav Halchenko
f8b17f3859
* Added Vcs- fields, moved Homepage into source header's field
2007-11-23 11:09:34 -05:00
Yaroslav Halchenko
46cfc2bbd6
added example for "refused connect"
2007-11-23 09:00:08 -05:00
Yaroslav Halchenko
1cedd8e02b
BF: removed sftp from ssh jails
2007-11-22 14:32:17 -05:00
Yaroslav Halchenko
2553e2717a
* Added force-start action to init script, so it could be forced
...
to start if previous run crashed and left a socket file. Must to be
used with caution.
2007-10-18 22:03:37 -04:00
Yaroslav Halchenko
8d9aca4e20
* Fixed named-refused filter.
2007-10-16 17:02:35 -04:00
Yaroslav Halchenko
99dbe90ad2
releasing
2007-10-16 17:02:35 -04:00
Yaroslav Halchenko
413ec5317e
first pre-release version of 0.8.1
2007-10-16 17:02:35 -04:00
Yaroslav Halchenko
0012f9ff92
* (NOT RELEASED YET) New upstream release.
...
Patches absorbed upstream:
00_daemon_pids.dpatch
00_iptables_allports.dpatch
00_vsftp_filter_spaces.dpatch
00_resolve_all_names.dpatch
00_HOST_ignoreregex.dpatch
Patches which needed some tune-up:
00_ssh_strong_re.dpatch
00_mail-whois-lines.dpatch
00_named_refused.dpatch
2007-10-16 17:02:35 -04:00
Yaroslav Halchenko
e10a8616b4
fetched fresh upstream 0.8.1
2007-10-16 17:02:35 -04:00
Yaroslav Halchenko
922b5035ea
actually we never released pre-release
2007-10-16 17:02:35 -04:00
Yaroslav Halchenko
85b75c77fb
* Resolve all "names" which became a part of <HOST>. Previousely only fqdn's
...
were resolved
2007-08-13 21:13:59 +00:00
Yaroslav Halchenko
c5202ce696
* Added optional spaces at the end of failregex for vsftpd.
2007-08-06 01:39:30 +00:00
Yaroslav Halchenko
58ae2a5a75
* Added new time template matching named log entries
2007-07-30 02:31:35 +00:00
Yaroslav Halchenko
95d17ee318
* Adjusted failregex for sshd filter:
...
- anchored properly at the end of line, and source code has .examples
files to perform testing of the rules.
- added new explicit rule for users not in the AllowUsers lists
2007-07-29 17:20:23 +00:00
Yaroslav Halchenko
3aef16b773
* jail.conf has specification of protocol (default to tcp) to be provided to
...
banaction
2007-07-25 03:47:32 +00:00
Yaroslav Halchenko
990bd15dd5
specified default protocol (tcp) and specified udp for jail for named
2007-07-25 03:46:41 +00:00
Yaroslav Halchenko
ac7e1696d4
fixed named filter to account for optional (cache)
2007-07-24 20:04:20 +00:00
Yaroslav Halchenko
14d3ffc6de
* Added a filter for named to catch refused/denied queries
2007-07-24 18:10:05 +00:00
Yaroslav Halchenko
2a3d710cad
adjusted pam_generic patch in example to catch ftp
2007-07-24 17:25:38 +00:00