5434 Commits (8d45deca86d7ecbaa66a14c6507c76fd0f08f0c3)

 

All Branches   

Search

Author	SHA1	Message	Date
sebres	8d45deca86	Merge branch '0.10' into 0.11	3 years ago
sebres	974ba688d4	Merge branch 'patch-3098' into 0.10	3 years ago
Sergey G. Brester	7f22c4873a	remove 2to3 in setup (should be called outside before setup)	3 years ago
Sergey G. Brester	1414a44b8e	Update main.yml ... CI: try to install dependencies via apt, add build test	3 years ago
sebres	64217fe018	Merge branch '0.10' into 0.11	3 years ago
sebres	c0f9348db5	Merge branch 'sebres/gh-3097--fix-unh-except' into 0.10; ... closes #3097	3 years ago
sebres	d709ec8179	GH actions: use newest python version for 3.10 (3.10.0-rc.2)	3 years ago
sebres	ba282b794c	pyinotify: amend to 1e4a14fb25d88e32f3ca9c06fb1d6b8d3b4813ab: one fix more for sporadic runtime error "dictionary changed size during iteration" (watched files)	3 years ago
sebres	e323c148e1	backend systemd: fixes error "local variable 'line' referenced before assignment", introduced in 55d7d9e214f72bbe4f39a2d17aa004d80bfc7299; ... don't update database too often (every 10 ticks or ~ 10 seconds in production); closes gh-3097	3 years ago
sebres	1e4a14fb25	pyinotify: fixes sporadic runtime error "dictionary changed size during iteration" (if something outside changes the pending dict during _checkPending evaluation) - simply deserialize to a list for iteration, without any lock, because unneeded here due to small and mostly empty dictionary (logrotate, etc), not to mention that pending check is normally called once per minute; ... don't call process file inside of server thread calling of addLogPath (always retard it as pending event); ensure to wake-up as soon as possible to process pending events (e. g. if file gets added).	3 years ago
sebres	2f99d5accb	test coverage for unhandled exception in run of several filter (gh-3097)	3 years ago
sebres	c03fe6682c	merge 0.10 to 0.11 (GHSA-m985-3f3v-cwmm)	3 years ago
sebres	e3f2fcfab4	merge point (GHSA-m985-3f3v-cwmm 0.9/0.10)	3 years ago
sebres	2ed414ed09	fixed possible RCE vulnerability, unset escape variable (default tilde) stops consider "~" char after new-line as composing escape sequence ... closes GHSA-m985-3f3v-cwmm for 0.9	3 years ago
sebres	410a6ce5c8	fixed possible RCE vulnerability, unset escape variable (default tilde) stops consider "~" char after new-line as composing escape sequence	3 years ago
sebres	d2f5c7de09	Merge branch '0.10' into 0.11	4 years ago
sebres	92f90038fa	filter.d/dovecot.conf: extended to match prefix like `conn unix:auth-worker (uid=143): auth-worker<13247>:` (authenticate from external service like exim), gh-2553	4 years ago
sebres	8b984a0135	filter.d\exim-common.conf: pid-prefix extended to match `mx1 exim[...]:` (gh-2553)	4 years ago
sebres	6be1a5a0b1	filter.d/dovecot.conf: fixed "Authentication failure" regex, matches "Password mismatch" in title case (gh-2880)	4 years ago
sebres	8afea37494	filter.d/sendmail-auth.conf: covering several "authentication failure" messages, sendmail 8.16.1 (gh-2757)	4 years ago
sebres	c5f1598a21	filter.d/postfix.conf: extended to cover new vectors: ... - reject: BDAT/DATA from (gh-2927) - (since regex is more precise now) token selector changed to `[A-Z]{4}`, e. g. no matter what a command is supplied now (RCPT, EHLO, VRFY, DATA, BDAT or something else) - matches "Command rejected" and "Data command rejected" now	4 years ago
sebres	ae3e9b9149	filter.d/postfix.conf: extended to cover 2 new vectors: ... - RCPT from unknown, 504 5.5.2, need fully-qualified hostname, gh-2995 - 550 5.7.25 Client host rejected, gh-2996 review combining several regex to single one	4 years ago
sebres	87f717e0e0	filter.d/sendmail-reject.conf: fix reverse DNS for ... (gh-3012)	4 years ago
sebres	3312b8cb95	Merge branch '0.10' into 0.11	4 years ago
sebres	1627d4f573	filter.d/sendmail-auth.conf: user not found, closes gh-3030	4 years ago
sebres	3e1aa03037	Merge branch '0.10' into 0.11	4 years ago
sebres	ef5c826c74	fixes search for the best datepattern (gh-3020) - e. g. if line is too short, boundaries check for previously known unprecise pattern may fail on incomplete lines (logging break-off, no flush, etc)	4 years ago
sebres	2918849f9e	fixes precise year pattern %ExY - accept years 20xx up to current century (using almost the same pattern in tests and production now)	4 years ago
sebres	b5b615731e	Merge branch '0.10' into 0.11	4 years ago
sebres	319cfefac2	fix travis build (unsupported pythons and pypy versions), update 3.10 in GH actions	4 years ago
sebres	d3f5d2d52b	documentation (interpolation tags)	4 years ago
sebres	f0214b3d36	filter.d/sendmail-reject.conf: fixed regex to consider "Connection rate limit exceeded" with different combination of arguments	4 years ago
Sergey G. Brester	d74dd9321b	Merge pull request #2565 from caronc/0.11 ... Add Apprise Support (50+ Notifications)	4 years ago
Sergey G. Brester	b2f6a3a658	remove unneeded substitution ... it is enough to add `apprise` to action	4 years ago
sebres	6cf4669dee	Merge branch '0.10' into 0.11	4 years ago
sebres	d135aeea16	fixes restore of original logging withing tests (`LogCaptureTestCase.tearDown`) - python 3 seemed still to log wordy after tear down (setting of log.level does not restore the level for related log objects - e. g. for logger of `fail2ban.jail` etc, so `fail2ban-testcases '(testVersion|testLongName).*servertest'` generating messages in stdout handler in testLongName)	4 years ago
sebres	8757563be1	close fork	4 years ago
sebres	061fab898a	Merge branch '0.10' into 0.11	4 years ago
sebres	e587526ede	tests: add missing constraint (causing incomplete comparison in below cycle if fewer lines as expected was found)	4 years ago
sebres	3eaefe8da0	Merge branch '0.10' into 0.11	4 years ago
sebres	04aba6168c	fixed typo, `--` is not expected in options declaration, so `--dump-pretty` did never work (only `--dp` is working)	4 years ago
sebres	a45b1c974c	filter.d/ignorecommands/apache-fakegooglebot: added timeout parameter (default 55 seconds) - avoid fail with timeout (default 1 minute) by reverse lookup on some slow DNS services (googlebots must be resolved fast); ... closes gh-2951	4 years ago
sebres	63acc862b1	`action.d/nginx-block-map.conf`: reload nginx only if it is running (also avoid error in nginx-errorlog, gh-2949) and better test coverage for the action	4 years ago
sebres	fb6315ea5e	Merge branch '0.10' into 0.11	4 years ago
sebres	6f4b6ec8cc	action.d/badips.* removed (badips.com is no longer active, gh-2889)	4 years ago
sebres	e3d43d1241	Merge branch 'fix-rc-on-too-many-failures' into 0.10: resolves RC with uncontrolled growth of failure list (jail with too many matches that did not cause ban, gh-2945)	4 years ago
sebres	92a2242174	amend fixing journal tests (systemd backend only)	4 years ago
sebres	e353fb8024	fixed test cases (ban ASAP also followed in test suite now, so failure reached maxretry causes immediate ban now)	4 years ago
sebres	55d7d9e214	*WiP* try to solve RC on jails with too many failures without ban, gh-2945 ...	4 years ago
sebres	a0352182e8	Merge branch '0.10' into 0.11	4 years ago