Yaroslav Halchenko
6cddc65cee
BF: path to exim's mainlog on Fedora (Thanks Frantisek Sumsal) + changelog entry
11 years ago
Yaroslav Halchenko
43950d8b7e
BF: fix path to the exim log on Debian systems (/var/log/exim4)
11 years ago
Yaroslav Halchenko
0adb10f653
Merge branch 'ainfo-copy' of https://github.com/kwirk/fail2ban
...
* 'ainfo-copy' of https://github.com/kwirk/fail2ban :
TST: actions modifying aInfo test more robust
TST: Test for actions modifying (un)ban aInfo
BF: aInfo could be modified by actions, causing unexpected behaviour
11 years ago
Steven Hiscocks
2d54161696
Merge branch 'kwirk/harmonize-log-msgs'
...
Conflicts:
ChangeLog - Keep all additions
11 years ago
Steven Hiscocks
76a5633ff9
Merge pull request #739 from ranvis/enh-iptables-ipsets
...
ENH: Add <chain> to iptables-ipsets.
11 years ago
SATO Kentaro
65ff3e9604
ENH: Introduce iptables-common.conf.
11 years ago
Steven Hiscocks
94232d7c31
Merge pull request #726 from pmarrapese/master
...
Minor improvement to sshd filter
11 years ago
Steven Hiscocks
8268c1641f
BF: aInfo could be modified by actions, causing unexpected behaviour
...
A separate copy of aInfo is passed to each action
11 years ago
Yaroslav Halchenko
93d5c363ca
Merge branch 'enh/oracle_msg_server'
...
* enh/oracle_msg_server:
ENH: make oracleims failregex better anchored (more explicit)
Update oracleims.conf to be 'less greedy'
Update THANKS
Update jail.conf for oracleims filter.
Create test for oracleims filter
Create oracleims.conf in filter.d for new filter
11 years ago
SATO Kentaro
1e1c4ac62a
ENH: Add <chain> to iptables-ipsets.
11 years ago
Yaroslav Halchenko
994fe77e59
ENH: make oracleims failregex better anchored (more explicit)
11 years ago
JoelSnyder
5165d2f6ea
Update oracleims.conf to be 'less greedy'
...
This assumes that the protocol is always a string, which it always is, and that the other four fields in the "tr" are always numeric (which they always are). See port_access documentation at http://docs.oracle.com/cd/E19563-01/819-4428/bgaur/index.html
11 years ago
JoelSnyder
70ed93d8cc
Update jail.conf for oracleims filter.
...
This is the jail.conf update. Hopefully this will go into pull request #734 .
11 years ago
Steven Hiscocks
e8131475cd
ENH: Realign and harmonise log messages with getF2BLogger helper
11 years ago
Steven Hiscocks
db023be09b
BF: Fix bad syntax in badips.py action
...
Taken from https://bugzilla.redhat.com/attachment.cgi?id=895966&action=diff
11 years ago
JoelSnyder
9b7c35810a
Create oracleims.conf in filter.d for new filter
...
Created oracleims.conf to catch messages from Sun/Oracle Communications Messaging Server v6.3 and above (including v7)
11 years ago
pmarrapese
96918acee4
more explicit match for sshd filter & added test
11 years ago
pmarrapese
46d6e93800
adjusted sshd filter regex to catch more verbose lines
11 years ago
Steven Hiscocks
77ba065571
Merge pull request #697 from jhmartin/monit_admin_hack
...
Block brute-force attempts against the Monit gui
11 years ago
Steven Hiscocks
bc10b64c69
ENH: Match non "Bye Bye" for sshd locked accounts failregex
11 years ago
Yaroslav Halchenko
596b819bdc
DOC: minor -- tabify docstring in badips.py action
11 years ago
Jason Martin
9c3cb31862
Even stricter monit regex, now covers entire line
11 years ago
Jason Martin
72bfd14330
Tidy up filter.d/monit.conf, make regex more complete.
...
Add ChangeLog / THANKS entry.
Add test cases.
11 years ago
Steven Hiscocks
03d90c2f42
BF: recidive filter and samples at wrong log level: WARNING->NOTICE
11 years ago
Jason Martin
7d112430ca
Block brute-force attempts against the Monit gui
11 years ago
Steven Hiscocks
d4427e5a76
Merge pull request #683 from yarikoptic/fix/682
...
Fix typos referencing paths-common, provide empty defaults for syslog_ log files (Partial fix to #682 )
11 years ago
Steven Hiscocks
9fcb92524e
BF: badips.py action logging of exc_info on debug typo
11 years ago
Yaroslav Halchenko
8bcb25c3a2
defining empty defaults for syslog_ log targets for common (Thanks @chtheis, partial fix to #682 )
11 years ago
Yaroslav Halchenko
7dcea0d48d
typos of paths-common (Thanks @chtheis, partial fix to #682 )
11 years ago
Yaroslav Halchenko
5bccec61e4
ENH: adding pruned with previous merge trailing \s* in nginx filter
11 years ago
Yung-Chin Oei
941a38ea8e
nginx-http-auth: match when "referrer" is present
...
A sample log-line is provided. The updated regex successfully matches
this line.
Signed-off-by: Yung-Chin Oei <yungchin@yungchin.nl>
11 years ago
shawn
d7e888238c
Correct grammar
11 years ago
yungchin
6e8c1b2871
nginx-http-auth filter: match server_name = ""
...
As documented at
http://nginx.org/en/docs/http/server_names.html#miscellaneous_names "If
no server_name is defined in a server block then nginx uses the empty
name as the server name." This regex change allows us to match error
output for such a configuration.
The log line added to the tests was lifted from our logs verbatim; it
did not match without the patched regex.
Signed-off-by: Yung-Chin Oei <yungchin@yungchin.nl>
11 years ago
yungchin
3a155ed2e0
Update comments in shorewall.conf for new settings
11 years ago
Ruben Kerkhof
1c36da9df9
Fix 2 more typos that codespell didn't catch
11 years ago
Ruben Kerkhof
1695d5c076
Fix a few typos
...
Found with https://github.com/lucasdemarchi/codespell
Signed-off-by: Ruben Kerkhof <ruben@rubenkerkhof.com>
11 years ago
Manuel Rüger
5a1ad75114
Fix typo in comment
11 years ago
Steven Hiscocks
41cbbbc248
BF: Remove unused imports and variables.
...
All highlighted by using pyflakes.
11 years ago
Steven Hiscocks
16125ec81a
BF: badips.py action methods not static due to use of self._logSys
11 years ago
Steven Hiscocks
6c5a978d6f
BF: journalmatch for recidive should be NOTICE level not WARNING
11 years ago
Daniel Black
7611096162
Merge branch '0.9' of https://github.com/fail2ban/fail2ban into 0.9
11 years ago
Daniel Black
aa7e8fb9ce
DOC: Credits. close gh-644
11 years ago
Steven Hiscocks
9e374b159e
ENH: Allow setting of badips.py key for reporting and blacklisting
11 years ago
Steven Hiscocks
de43d1d6d5
ENH: Change badips.py default score to "3"
...
As per recommendation from Amy from badips.com
11 years ago
Daniel Black
476d79d3cc
ENH: asterisk filter to support syslog format
11 years ago
Daniel Black
415f187644
ENH: sendmail-reject for all smtp ports.
11 years ago
Steven Hiscocks
a78a9d282c
DOC: Document that badips.py action should be last action for jail
11 years ago
Steven Hiscocks
0222ff4677
Merge branch 'badips-blacklist' into 0.9
...
Conflicts:
ChangeLog
- entires added in both branches.
Change:
config/action.d/badips.py
- jail.getName() changed to jail.name
11 years ago
Steven Hiscocks
0c63d0061a
DOC: Add documentation for badips.py action
11 years ago
Steven Hiscocks
dfb46cfda6
BF: Require Python 2.7+ for badips.py action
11 years ago