sebres
581f13c2db
Merge branch '0.10' into 0.11
5 years ago
Sergey G. Brester
d3b5befe44
update changelog ( #2404 )
5 years ago
sebres
0a209f01c2
Merge branch '0.10' into 0.11
5 years ago
Sergey G. Brester
7520d250b0
Merge pull request #2444 from sebres/gh-2392
...
systemd-backend: switched default flags to SYSTEM_ONLY(4)
5 years ago
Sergey G. Brester
8a386103c1
Update ChangeLog
6 years ago
sebres
5045c4bb00
Merge branch '0.10' into 0.11
6 years ago
girst
b288ccd6b6
new filter: znc-adminlog
6 years ago
sebres
2e7a600851
Merge branch '0.10' into 0.11
6 years ago
sebres
4c81338944
update ChangeLog (gh-2390)
6 years ago
sebres
686a8bdc54
Merge branch '0.10' into 0.11
6 years ago
sebres
2725acb64b
amend to 809acb69e5928c0e678ad25b43e53b567cb23a3b: extended to avoid the vice versa race (too many outdated tickets to unban) - max count of outdated tickets is restricted also.
6 years ago
sebres
0ed3a63151
Merge branch '0.10' into 0.11
6 years ago
sebres
e5ae113215
filter.d/postfix.conf: extended with new postfix filter mode `errors` to match "too many errors" (gh-2439),
...
also included within modes `normal`, `more` (`extra` and `aggressive`), since postfix
parameter `smtpd_hard_error_limit` is default 20 (additionally consider `maxretry`)
6 years ago
sebres
3b2f75414c
filter.d/postfix.conf: extended regexp's to accept variable suffix code in status of postfix for precise messages (gh-2442)
6 years ago
sebres
3d4044084a
Merge branch '0.10' into 0.11
6 years ago
sebres
8da9bfb83a
Update ChangeLog (gh-2302, rebased to 0.10)
6 years ago
sebres
f48677db7d
Merge branch '0.10' into 0.11
6 years ago
sebres
3b51c005f8
update ChangeLog (multi-line parsing fix, gh-2431)
6 years ago
sebres
ca85ddc866
Merge branch '0.10' into 0.11
6 years ago
sebres
4d08bc4ad5
update ChangeLog
6 years ago
sebres
f0c5bd56f4
Merge branch '0.10' into 0.11 (conflicts resolved)
6 years ago
Sergey G. Brester
7d6db7391e
Update ChangeLog
6 years ago
sebres
337be4b36c
Merge remote-tracking branch 'remotes/gh-upstream/0.10' into 0.11
6 years ago
Sergey G. Brester
28c1da33dc
Merge pull request #2387 from sebres/logtype-option-journal
...
New backend-related option `logtype` (`journal` or `file`)
6 years ago
Sergey G. Brester
d920dd4014
Update ChangeLog
6 years ago
Sergey G. Brester
ec9f698f5b
removed new-line
6 years ago
Amir Caspi
7ac2f167f9
Update ChangeLog
...
Fixing typo I introduced in commit eed1de0ceb
6 years ago
Amir Caspi
eed1de0ceb
Update ChangeLog
...
Updated to reflect sendmail-reject changes 9e1fa4ff73
and ffd5d0db78
6 years ago
sebres
1e59d53bbe
fixed typo
6 years ago
sebres
324f0ed7cc
Merge branch '0.10' into 0.11
6 years ago
Sergey G. Brester
6c14f1987f
Update ChangeLog
6 years ago
Sergey G. Brester
410a9804b1
Update ChangeLog
6 years ago
Ben RUBSON
34edec297b
Add changelog entry
6 years ago
sebres
a3b7a0525a
Merge branch '0.10' into 0.11
6 years ago
Sergey G. Brester
d3f6d6ffdd
Merge pull request #2286 from crazy-max/0.10
...
New filter `traefik-auth`
6 years ago
sebres
e44cd671b2
Merge branch '0.10' into 0.11 (conflicts resolved, tests fixed)
6 years ago
Sergey G. Brester
a48d50efc0
Update ChangeLog
6 years ago
sebres
1647d0090e
Merge branch '0.10' into 0.11
6 years ago
Sergey G. Brester
c819a18a0a
Update ChangeLog
6 years ago
sebres
d88ce7181c
Merge branch '0.10' into 0.11
6 years ago
Sergey G. Brester
4108e04ab4
Update ChangeLog
6 years ago
sebres
f959f58e15
extend protocol (command-line) and regenerate man's
6 years ago
sebres
df97fd33cf
ip-list is sorted now (by end of ban) per default;
...
extended with new option `--with-time` to provide more pretty and informative result (separated by new-line, including time strings: time of ban + ban-time = end of ban):
192.0.2.1 2019-01-06 22:24:48 + 300 = 2019-01-06 22:29:48
192.0.2.2 2019-01-06 22:24:48 + 600 = 2019-01-06 22:34:48
also it is possible now to provide separator-character as extra-parameter after `get <jail> banip ?sep-char?` (default is space).
removed unneeded test-cases (test code-base minimization) and unexpected manually changed files.
6 years ago
SP
3d477d229d
ENH: added new command `fail2ban-client get <JAIL> banip` to get the banned ip addresses (gh-1916)
6 years ago
sebres
2010dda6fa
Merge branch '0.10' into 0.11
6 years ago
Sergey G. Brester
3fa54559e5
Update ChangeLog
6 years ago
sebres
9b96a7de89
fix of SafeConfigParserWithIncludes
6 years ago
CrazyMax
a51f82770b
New filter `traefik-auth`
6 years ago
sebres
b49c1ab4b3
Merge branch '0.10' into 0.11
6 years ago
Sergey G. Brester
0ac5c8941c
Update ChangeLog
6 years ago
sebres
f9f7e29295
Merge branch '0.10' into 0.11 (version bump after r.0.10.4)
6 years ago
sebres
0ae02ba2a1
version bump (back to dev-version)
6 years ago
sebres
aa565eb80e
release 0.10.4 - ten-four-on-due-date-ten-four
6 years ago
sebres
6b52f90ad6
Merge branch '0.10' into 0.11
6 years ago
sebres
58b510a5be
filter.d/domino-smtp.conf:
...
- recognizes failures logged using another format (something like session-id, IP enclosed in square brackets);
- failregex extended to catch connections rejected for policy reasons (gh-2228);
6 years ago
sebres
addd26ae55
Merge branch '0.10' into 0.11
6 years ago
sebres
e2a255d104
fixed typo in comments by "ignoreself" parameter
6 years ago
sebres
606761b3c7
Merge branch '0.10' into 0.11
6 years ago
sebres
6ad9bb56a0
Update ChangeLog
6 years ago
sebres
6a81cc9d8c
Merge branch '0.10' into 0.11
6 years ago
sebres
8fe07e29ad
filter.d/dovecot.conf: failregex enhancement to catch disconnected with "proxy dest auth failed";
...
closes gh-2184
6 years ago
sebres
d65d7fd4d0
Merge branch '0.10' into 0.11
6 years ago
sebres
f8f01d5ab7
introduced new option `ignorecache` to improve performance of ignore failure check (using caching of `ignoreip`, `ignoreself` and `ignorecommand`)
6 years ago
sebres
9b6d17d07e
extend `ignorecommand` to use actions-similar replacement (ticket-based now, so capable to interpolate all possible tags)
6 years ago
sebres
57f2d9e31c
Merge branch '0.10' into 0.11
6 years ago
Sergey G. Brester
11c1bf0149
Update ChangeLog
6 years ago
sebres
9de1657aab
Merge branch '0.10' into 0.11
6 years ago
sebres
d0945120bf
ChangeLog
6 years ago
sebres
9fdc6e0e82
Merge branch '0.10' into 0.11
7 years ago
Boris Gulay
a923cd209b
`filter.d/dovecot.conf`: failregex enhancement to catch sql password mismatch errors;
7 years ago
sebres
47d3a1213c
Merge branch '0.10' into 0.11
7 years ago
sebres
f220aba26f
minor: added missing new-line (no functional changes)
7 years ago
sebres
e36f4667ab
fail2ban-client, fail2ban-server and fail2ban-regex will return version without logo info, additionally option `-V` can be used to get version in normalized machine-readable short format;
...
closes gh-2122.
7 years ago
sebres
0d40dd42b1
Merge branch '0.10' into 0.11
7 years ago
Sergey G. Brester
9f3a80a21a
Update ChangeLog
7 years ago
sebres
0707695146
Merge branch '0.10' into 0.11, version bump
...
# Conflicts resolved:
# fail2ban/server/database.py
7 years ago
sebres
414469c102
Merge '0.10.3.fix1' into 0.10
7 years ago
sebres
c1923f9644
update ChangeLog
7 years ago
sebres
187514eda7
bump version (0.10.3 -> 0.10.4.dev1)
7 years ago
sebres
0a50f2e19e
next release of 0.10: bump version, update ChangeLog, man's and MANIFEST etc.
7 years ago
sebres
70d099bbd6
Merge branch '0.10' into 0.11
7 years ago
sebres
4a8506fcca
update ChangeLog
7 years ago
sebres
1fdad90b4d
Merge branch '0.10' into 0.11
7 years ago
Sergey G. Brester
d9525ad3aa
Update ChangeLog
7 years ago
Sergey G. Brester
7bbc26d67e
Merge pull request #2097 from benrubson/sni
...
Detect Apache SNI error / misredirect attempts
7 years ago
Sergey G. Brester
28ae32f0ca
Update ChangeLog
7 years ago
sebres
f877980da9
Merge branch '0.10' into 0.11
7 years ago
sebres
e786dbf132
New logging parameter `padding`, default enabled, excepting the SYSLOG (for backwards compatibility purposes);
...
Closes gh-2099.
7 years ago
sebres
7dfd61f462
Merge branch '0.10' into 0.11-2
7 years ago
sebres
8423f017e7
Merge branch 'sshd-ddos-mode-closed-preauth' into 0.10
7 years ago
sebres
4ee07adde6
Merge branch '0.10' into fix-sshd-filter-suff
...
# Conflicts resolved:
# fail2ban/server/filter.py
7 years ago
sebres
e5735b9951
ChangeLog updated
7 years ago
sebres
ed7d5d8ea1
ChangeLog updated
7 years ago
sebres
66d2436f21
filter.d/sshd.conf: extend suffix with optional port, move it to `prefregex` at end outside of the content
7 years ago
sebres
8763cf0a36
ChangeLog updated
7 years ago
sebres
a6fb33bdec
filter.d/recidive.conf: fixed if logging into systemd-journal (SYSLOG) with daemon name in prefix, gh-2069
7 years ago
Sergey G. Brester
b16aafe233
Update ChangeLog
7 years ago
sebres
2b282ead09
Merge branch '0.10' into 0.11
7 years ago
sebres
a3bcbe2d1b
backwards-compatibility, test-cases and ChangeLog update
7 years ago
sebres
1d7aa2ff21
filter.d/sshd.conf: rewrite fix (for new ssh log-format) backwards compatible + test-cases extended to cover both cases
7 years ago
sebres
5ea76789c6
Merge branch '0.10' into 0.11
7 years ago
sebres
8c291cad38
filter.d/asterisk.conf: fixed failregex prefix by log over remote syslog server (gh-2060)
7 years ago
Ben RUBSON
b112250ef0
(Free)BSD IPFW does not allow 2 identical rules ( #2054 )
...
ipfw actionban fixed to allow same rule added several times (and actionunban to ignore error by deletion of missing rule)
7 years ago
Ben RUBSON
857767f04b
Add 'any' badips.py bancategory ( #2056 )
...
action.d/badips.py: allow `any` as bancategory to retrieve IPs from all categories
7 years ago
sebres
47a7f83a0b
Merge branch '0.10' into 0.11
7 years ago
sebres
07fcb24ff6
Merge pull request #2057 from benrubson/https
...
Use httpS with badips
7 years ago
benrubson
8ed892b8bb
Changelog
7 years ago
benrubson
9a8add0ef0
changelog
7 years ago
sebres
a5155f55e7
Merge branch '0.10' into 0.11
7 years ago
Sergey G. Brester
879f580c9a
Update ChangeLog
7 years ago
sebres
201ae0dac2
Merge branch '0.10' into 0.11
7 years ago
Sergey G. Brester
3a1c386958
Update ChangeLog
7 years ago
sebres
9440956575
Update ChangeLog
7 years ago
sebres
c50875ccf6
Update ChangeLog: all major 0.11 changes combined in 0.11th block now
7 years ago
sebres
aa47937d4f
Merge branch '0.10' into 0.11: bum version after release of 0.10.2
7 years ago
sebres
9a38d5697f
bump version (0.10.2 -> 0.10.3.dev1)
7 years ago
sebres
a45488465e
prepare release: bump version, update ChangeLog, man's and MANIFEST etc.
7 years ago
sebres
1ca3df877b
Merge branch '0.10' into 0.11
7 years ago
sebres
81b61fe30c
ChangeLog update
7 years ago
sebres
38b3290516
Merge branch '0.10' into 0.11
7 years ago
sebres
ed22ddbbbb
Merge remote-tracking branch 'remotes/gh-upstream/master' into 0.10
7 years ago
Benedikt Seidl
fed6c49c2d
nginx-http-auth: match usernames with spaces
...
# Conflicts:
# ChangeLog
7 years ago
sebres
576eeb70dd
Merge branch '0.10' into 0.11
7 years ago
sebres
2b7b0da943
Merge remote-tracking branch 'remotes/gh-upstream/master' into 0.10
7 years ago
sebres
039ac7c7c4
Merge branch '0.10' into 0.11
7 years ago
sebres
1c0fc73e48
Update ChangeLog
7 years ago
sebres
314e402fe0
filter.d/sendmail-auth.conf - extended daemon for Fedora 24/RHEL - the daemon name is "sendmail" (gh-1632)
7 years ago
sebres
0e68c9a720
Merge branch '0.10' into 0.11
7 years ago
sebres
c30144b37a
Merge branch '0.9' into 0.10
...
# Conflicts:
# config/action.d/firewallcmd-ipset.conf
# config/filter.d/asterisk.conf
# Merge-point after cherry-pick, no changes:
# fail2ban/client/jailreader.py
# fail2ban/helpers.py
7 years ago
Serg G. Brester
029cd5aa24
Update ChangeLog
7 years ago
Danila Vershinin
c190631f88
New ban action firewallcmd-ipset-allports. Closes #1167
7 years ago
Serg G. Brester
f7e2d3610b
Update ChangeLog
7 years ago
sebres
5028f17f64
Merge branch '0.10' into 0.11, rewrite updateDb because it can be executed after repair, and some tables can be missing.
...
# Conflicts:
# fail2ban/server/database.py
# fail2ban/tests/fail2banclienttestcase.py
# fail2ban/tests/sockettestcase.py
7 years ago
Serg G. Brester
2d23f35d26
Update ChangeLog
...
typo: missing newline restored.
7 years ago
sebres
79443210ad
Update ChangeLog
7 years ago
sebres
7e5d8f37fd
Merge branch '0.10' into 0.11
...
# Conflicts:
# config/action.d/firewallcmd-ipset.conf
# fail2ban/server/jail.py
# fail2ban/tests/servertestcase.py
7 years ago
Serg G. Brester
ad658a0a95
Merge pull request #1989 from sebres/logging-options
...
New server logging options
7 years ago
sebres
cc9ff31c9c
Update ChangeLog: `action.d/firewallcmd-ipset.conf`: fixed create of set for ipv6 (missing `family inet6`, gh-1990)
7 years ago
sebres
f9833ddee4
Update ChangeLog
7 years ago
Serg G. Brester
b0ba1aa846
Update ChangeLog
7 years ago
sebres
cc153888d5
Merge branch '0.10' into 0.11
7 years ago
sebres
7f89fbc33f
Merge remote-tracking branch 'remotes/gh-upstream/master' into 0.10
7 years ago
Peter Nowee
e4bbaf3d58
Update ChangeLog
7 years ago
sebres
5547697401
ChangeLog and typo
7 years ago
sebres
5cc0abbb02
Merge branch '0.10' into 0.11
...
# Conflicts:
# fail2ban/tests/fail2banclienttestcase.py
7 years ago
sebres
b62ab2d51e
ChangeLog updated
7 years ago
sebres
12b55bb8cc
Merge remote-tracking branch '0.10' into 0.11
7 years ago
sebres
6db9ae8574
ChangeLog updated
7 years ago
sebres
8aeaaf06ee
Merge branch '0.10' into 0.11
7 years ago
sebres
159957ab88
filter.d/sshd.conf: extended failregex for modes "extra"/"aggressive": now finds all possible (also future) forms of "no matching (cipher|mac|MAC|compression method|key exchange method|host key type) found", see "ssherr.c" for all possible SSH_ERR_..._ALG_MATCH errors;
...
obsolete (multi-line buffered) variant extended also.
Closes gh-1943, gh-1944
7 years ago