Alexander Belykh
260c30535d
Escape curly braces in nftables actions
2016-01-06 17:13:30 +06:00
Alexander Belykh
1983e15580
Add empty line between parameters in nftables-common.conf
2016-01-06 16:55:29 +06:00
Alexander Belykh
cb2d70d7a8
Add ChangeLog entry for new nftables actions
2016-01-05 19:04:44 +06:00
Alexander Belykh
f7f91a8bd4
Refactor common code out of nftables-multiport/allports.conf
2016-01-05 19:03:47 +06:00
sebres
25a09352e4
+ ChangeLog entry
2016-01-04 14:46:43 +01:00
sebres
69f5623f83
code simplifying (remove duplication): agent will be always supplied as parameter from jail.conf
2016-01-04 09:30:32 +01:00
Alexander Belykh
618e97bce8
Add nftables actions
2016-01-04 01:36:28 +06:00
sebres
ac31121432
amend to fix fail2ban-version: correct user-agent for badips.py "Fail2Ban/ver", changeable within jail/config now;
2015-12-31 02:32:17 +01:00
Jordan Moeser
e133762a28
Added HAProxy HTTP Auth filter
2015-12-31 11:16:23 +10:00
sebres
cf334421bd
Provides fail2ban version to jail (as interpolation variable during parse of jail.conf);
...
BF: use `fail2ban_agent` as user-agent in actions badips, blocklist_de, etc. (closes #1271 , closes #1272 )
2015-12-31 01:38:25 +01:00
Yaroslav Halchenko
b76aede40d
ENH(TST): verify that passed bantime is non-0 and int
2015-12-29 20:22:06 -05:00
Yaroslav Halchenko
28c9832293
RF: harmonize jail.conf (no explicit enabled=false in jails, match filter name for screesharingd, etc)
2015-12-29 19:43:52 -05:00
Yaroslav Halchenko
69aa1feac0
Merge "Mac OS Screen Sharing filter" PR 1232
...
* pr/1232/head:
removed system.log
Removed old svn revision comment
removed false matches
Removed includes comment for screensharing jail
Now using a literal logpath for screensharing jail
Fixed blatant typo in regex
clarified comments on sample log format
Fixed name (again?)
Made screensharing jail off by default
Changed regex prequel
added entry for new screensharingd filter
name change & new sample data
Added json metadata
Sample log for test case
Replaced .* with literal
Update jail.conf
Added new path variable for system.log
Added in settings for screensharingd filter
Created file
Conflicts:
ChangeLog - moved to New Features
config/jail.conf - kept at the end
2015-12-29 19:36:59 -05:00
Yaroslav Halchenko
16710237e3
Merge remote-tracking branch 'origin/master'
...
* origin/master:
Add 'Sender address rejected: Domain not found' Postfix failregex
2015-12-29 19:31:04 -05:00
Yaroslav Halchenko
26dd6d7425
Merge pull request #1258 from aleksandrs-ledovskis/feature/postfix-domain-not-found-failregex
...
Add 'Sender address rejected: Domain not found' Postfix failregex
2015-12-18 09:23:54 -05:00
Yaroslav Halchenko
dfaf82d68a
Changelog entry for PartOf in .service fix
2015-12-18 09:23:12 -05:00
Yaroslav Halchenko
9f15d02910
Merge pull request #1251 from fastest963/master
...
Added PartOf to service file so f2b restarts when deps do
2015-12-18 09:21:43 -05:00
Yaroslav Halchenko
edcbdf6eab
Merge pull request #1264 from rbrownwsws/master
...
Added filter and jail for murmur/mumble-server.
2015-12-18 09:20:45 -05:00
Yaroslav Halchenko
39d202b623
Merge pull request #1273 from yarikoptic/enh-log-matchtuple
...
ENH: log at heavydebug level what actually we are matching for failregex
2015-12-18 09:20:02 -05:00
Ross Brown
8d12dba245
Merge remote-tracking branch 'upstream/master'
2015-12-17 18:01:17 +00:00
Ross Brown
16aa2fa13e
Updated ChangeLog to include new murmur jail.
2015-12-17 17:57:45 +00:00
Ross Brown
ead2d509dc
Updated 'murmur' filter to use new double-anchored regex based on @yarikoptic's suggestions.
2015-12-17 17:45:24 +00:00
Yaroslav Halchenko
61b2653f9e
Merge pull request #1274 from yarikoptic/enh-new-sshd-too-many
...
ENH: sshd filter -- match new "maximum auth attempts exceeded"
2015-12-16 06:58:47 -05:00
Ross Brown
fd36b058ce
Changed usernames in sample log file for 'murmur' filter.
2015-12-15 21:55:07 +00:00
Ross Brown
ba535826a8
Updated ChangeLog to include new murmur filter.
2015-12-15 21:46:35 +00:00
Yaroslav Halchenko
5d6cead996
ENH: sshd filter -- match new "maximum auth attempts exceeded" ( Closes #1269 )
2015-12-13 23:21:04 -05:00
Yaroslav Halchenko
9ee08fed48
ENH: log at heavydebug level what actually we are matching for failregex
2015-12-13 23:06:02 -05:00
sebres
6d984717b5
ordered dict replaced with dict + change log entry fix
...
# Conflicts:
# fail2ban/server/filter.py
2015-12-12 15:48:49 +01:00
Yaroslav Halchenko
48202f998d
RF: prefer log over container in getLog and local variables
...
Even though I have left FileContainer class name intact
2015-12-02 22:57:40 -05:00
Yaroslav Halchenko
59da27b9f6
ENH: add a check to testTail to assure correct test logic below it
2015-12-02 22:53:28 -05:00
Yaroslav Halchenko
dd9d1912e8
RF: Filter.getLogPaths -> getLogs
...
Since it returns log containers not paths per se
2015-12-02 22:49:47 -05:00
sebres
6ce7522d3c
unordered (python 2.6) compatibility fix and coverage extended;
2015-12-02 21:29:27 +01:00
sebres
3a179ec5d7
small code review: (much pretty) handling of filename as key - FileFilter contains (ordered) dict of files (not list), as discussed in gh-1265
2015-12-02 20:45:01 +01:00
Ross Brown
4c837f0333
Added sample log file for 'murmur' filter.
2015-11-29 16:28:47 +00:00
Ross Brown
106c3eab9a
Added filter and jail for murmur/mumble-server.
2015-11-29 15:56:56 +00:00
Serg G. Brester
1b0560d2f1
Merge pull request #1262 from sarneaud/gentoo-initd
...
Small fixes for Gentoo initd script
2015-11-28 21:00:28 +01:00
sarneaud
5b88a84fe8
Small fixes for Gentoo initd script
...
These fixes are pretty pedantic, but they do simplify the script a
little.
* Checking the existence of a file/directory before creating/deleting
it adds complexity and raciness. There are better options.
* mkdir -p does the job of making sure a directory exists. (It only
fails if there's a filesystem error or something.)
* Likewise, rm -f doesn't fail if the file doesn't exist.
* rm -r isn't neccessary because the socket shouldn't be a directory.
(If it is for some reason, that should be an error.)
2015-11-28 15:03:09 +11:00
Aleksandrs Ļedovskis
fa59a6850f
Add 'Sender address rejected: Domain not found' Postfix failregex
...
Signed-off-by: Aleksandrs Ļedovskis <aleksandrs@ledovskis.lv>
2015-11-22 12:01:15 +02:00
Yaroslav Halchenko
fe8d585d91
Merge pull request #1225 from opoplawski/journaldefault
...
Add *_backend options for services to allow distros to set the default backend
2015-11-14 10:49:45 -05:00
Orion Poplawski
c656cb0d36
Merge branch 'master' into journaldefault
...
Conflicts:
ChangeLog
2015-11-13 15:22:59 -07:00
James Hartig
9905396eb8
Added PartOf to service file so f2b restarts when deps do
2015-11-11 23:10:35 -05:00
Yaroslav Halchenko
b3ed19b36a
DOC: tune up to jail.conf.5 - some line breaks, typos etc
2015-11-10 08:47:13 -05:00
Yaroslav Halchenko
6af6e40b62
Merge pull request #1241 from sebres/known/param-tag
...
New interpolation feature for definition config readers - `<known/parameter>`
2015-11-10 08:35:57 -05:00
Yaroslav Halchenko
441dffbe2a
ENH: Pruned some "pragma: no cover"s in fail2banregex
...
This code should and can be unit-tested, so no reason to keep it with
no cover
2015-11-10 08:31:56 -05:00
Yaroslav Halchenko
584f3af5af
Merge pull request #1240 from yarikoptic/master
...
ENH: .mailmap file to bring some names together for git shortlog -sn
2015-11-10 08:30:06 -05:00
Yaroslav Halchenko
aa0588dd1a
Merge pull request #1250 from sebres/_sb/fail2ban-regex-coverage
...
RF: fail2ban-regex code moved into client/ codebase, unittested
2015-11-10 08:28:56 -05:00
sebres
689dfa1e6a
debuggexURL fixed for wrong encoded character; test cases extended;
2015-11-10 13:29:54 +01:00
sebres
38f09b417a
fail2ban-regex command line (after fail2ban-regex functionality moved to the client)
2015-11-10 13:26:34 +01:00
sebres
0877d66228
fail2ban-regex moved to the client + test cases for initial coverage added
2015-11-10 11:46:19 +01:00
sebres
46b116e86a
filter test cases improved + log captured inside such tests + python 3.x compatibility;
...
changelog entry;
2015-11-09 22:02:05 +01:00