github
/
fail2ban
mirror of https://github.com/fail2ban/fail2ban
1
0
Fork 0
Code Issues Releases Wiki Activity
1,821 Commits
33 Branches
229 Tags
19 MiB
Commit Graph

1821 Commits (934058cc0614500d849e2581e49d0a4a3bf3e52d)

Author SHA1 Message Date
Steven Hiscocks 934058cc06 Merge pull request #532 from grooverdan/split-filter-doco 
DOC: filter documentation was bigger than DEVELOP so separated it out.
 2013-12-30 05:06:52 -08:00
Yaroslav Halchenko acc5beaeb5 Merge pull request #536 from grooverdan/exim-spam 
ENH: exim-spam - also block based on emails "discarded" by spamassassin
 2013-12-29 20:39:25 -08:00
Daniel Black 4df246b0dd BF: ignorecommand is a jail option not a filter option 2013-12-29 21:57:37 +00:00
Daniel Black e220210dc4 DOC: fix ChangeLog entry for exim-spam 2013-12-29 21:55:04 +00:00
Daniel Black ccb64e68b4 DOC: for exim-spam to say how to enable the log lines for the latest regex 2013-12-29 21:53:26 +00:00
Daniel Black 3d79e1612b MRG: test cases on exim-spam 2013-12-29 21:38:00 +00:00
Ivo Truxa d2658e063c Update exim-spam 
An example with no valid FROM email address and host without reverse DNS record
 2013-12-29 22:33:08 +01:00
Daniel Black b5f5ddf123 ENH: end anchor for exim-spam 2013-12-29 20:56:25 +00:00
Daniel Black d727ba639a ENH: exim-spam to include spamassassin log entry. Closes gh-533 2013-12-29 20:16:37 +00:00
Ivo Truxa bb88cfaddb Update exim-spam 
attached sample Exim log line to demonstrate a silently tossed message as described at https://github.com/fail2ban/fail2ban/issues/533
 2013-12-29 18:53:04 +01:00
Daniel Black 2b9d4f86cd DOC: filter documentation was bigger than DEVELOP so separated it out. Hopefully it may get read more 2013-12-29 07:26:41 +00:00
Daniel Black 4a0e428563 DOC: change log for asynchat.push change 2013-12-29 07:11:57 +00:00
Daniel Black c074773805 ENH: apache modsecurity from 0.9 branch 2013-12-29 07:06:13 +00:00
Daniel Black 6666f41ee6 ENH: apache modsecurity filter 2013-12-29 06:59:47 +00:00
Daniel Black be382dae4d MRG: ufw changelog conflicts 2013-12-29 05:45:06 +00:00
Daniel Black 1f6ece2a40 Merge pull request #490 from grooverdan/firewallcmd-ipset 
ENH: add firewallcmd-ipset
 2013-12-28 21:43:49 -08:00
Steven Hiscocks 4d128db64a BF: asyncserver now ensures all data is sent 
Previously was using `send` method, which uses `socket.send`. This does
not guarantee to send all data, and no check was in place to verify
whether all data was sent. Using asynchat built in `push` method,
ensures that all data is sent before closing the connection.
 2013-12-28 18:42:03 +00:00
Daniel Black 33df269d82 Merge pull request #522 from yarikoptic/master 
TST/BF: basic changes to beef up coverage a tiny bit + restore compatibility with python2.4 (since we still claim to support it)
 2013-12-26 23:46:43 -08:00
Yaroslav Halchenko 6815190685 BF(2.4): omit date patterns containing %f (.subsec) for Python before 2.5 2013-12-27 02:08:47 -05:00
Yaroslav Halchenko c6a7bc2221 BF(2.4): remove use of "with" for python 2.4 for now (since we list it as supported) 2013-12-27 01:54:54 -05:00
Yaroslav Halchenko 952de51cf1 ENH: per original discussion, and changes which followed, better not to ignore absent failregex -- all filters (but included common) should have it 2013-12-27 01:47:15 -05:00
Yaroslav Halchenko 4e165c9692 ENH: FilterReader - use the set methods (improve coverage), test getters, use os.path.join 2013-12-27 01:43:23 -05:00
Yaroslav Halchenko 0141a6dbe7 TST: add few more rudimentary tests for Regex to complete its coverage 2013-12-27 01:29:02 -05:00
Daniel Black ddac79c15c TST: include blank ignorecommand in jail.conf to indicate default value and to raise test coverage 2013-12-25 11:01:31 +00:00
Daniel Black 6fa4e48f88 BF: Add testcases/files/ignorecommand.py to MANIFEST 2013-12-25 10:55:26 +00:00
Daniel Black dfb6c45297 Merge pull request #401 from bes-internal/ignorecommand 
ENH: New ignorecommand with path to external command for dynamic ignoreip list
 2013-12-24 23:43:41 -08:00
bes.internal 55d76ac373 TST: add test for IgnoreCommand at server 2013-12-25 00:58:00 +03:00
bes.internal ebd89ec077 New ignorecommand that is added to the ignoreip list from output of an external program 
ignorecommand update man and fix protocol help

ENH: run ignore command only after internal list has been examined. Change interface on ignorecommand to take IP as environment variable and return true if it is to be banned

ENH: ignore IP command to take tagged command

DOC: man pages for ingorecommand

TST: add test cases for ignorecommand
 2013-12-24 23:55:35 +03:00
bes.internal a8ea347fe3 Merge branch 'master' of https://github.com/fail2ban/fail2ban 2013-12-24 23:43:22 +03:00
Steven Hiscocks 46c6915cec Merge pull request #518 from grooverdan/process_file_called_twice 
BF: prevent process_file being called in pyinotify backend on log rotati...
 2013-12-24 04:10:55 -08:00
Steven Hiscocks 2c6e4d9ace Merge pull request #517 from grooverdan/apache-2.4 
BF: apache-2.4 log format fix. Closes gh-516
 2013-12-24 04:01:23 -08:00
Daniel Black b0ea5698b3 BF: prevent process_file being called in pyinotify backend on log rotation. Closes gh-512 2013-12-23 09:18:32 +00:00
Daniel Black 382d68f0fe DOC: perfork model for apache log format 2013-12-23 09:09:48 +00:00
Daniel Black 1b7df1181f BF: apache-2.4 log format fix. Closes gh-516 2013-12-23 08:28:40 +00:00
Yaroslav Halchenko 7af58b9984 Merge branch 'apache-noscripts' of https://github.com/grooverdan/fail2ban 
* 'apache-noscripts' of https://github.com/grooverdan/fail2ban:
  ENH: apache-noscript now matched php-cgi scripts. Closes gh-503

Conflicts:
	ChangeLog -- two new entries collided,  Reformatted the merged one a bit
 2013-12-22 22:28:57 -05:00
Yaroslav Halchenko 0256a1cb08 Merge pull request #513 from grooverdan/filterfile_tst 
TST: filterfile test cases
 2013-12-22 19:25:14 -08:00
Yaroslav Halchenko 23421ef2d6 Merge pull request #514 from leeclemens/patch-1 
Lee finally added himself to THANKS
 2013-12-22 19:02:18 -08:00
leeclemens ce3cc35828 Added myself to THANKS 
for previous commits
 2013-12-22 15:33:53 -05:00
Daniel Black 7a9252bd0e TST BF: local defination 2013-12-22 12:08:10 +00:00
Daniel Black 2a67ef519c TST: missing logpath raises IOError 2013-12-22 08:43:57 +00:00
Daniel Black 2d688a5a03 TST: improve polling test case to ensure isModified only returns True once (file static) 2013-12-22 07:47:24 +00:00
Daniel Black a9b7d33c51 ENH: apache-noscript now matched php-cgi scripts. Closes gh-503 2013-12-19 10:01:24 +00:00
Daniel Black 56f54dc2eb Merge pull request #504 from kwirk/nsd 
ENH: Add nsd filter and amend DateEpoch to match date format
 2013-12-19 01:30:14 -08:00
Steven Hiscocks d22716ab63 ENH: Add nsd filter and amend DateEpoch to match date format 2013-12-18 22:31:54 +00:00
Daniel Black 42a51930dd Merge pull request #500 from alasdairdc/master 
ENH: Updated nagios check_fail2ban to return performance data for all jails
 2013-12-18 00:38:15 -08:00
alasdairdc 04c267c307 Updated Changelog 2013-12-18 08:36:30 +00:00
alasdairdc 4e4f194457 Updated Thanks. 2013-12-18 08:31:54 +00:00
alasdairdc 2e5a2b26fb Updated check_fail2ban to return performance data for all jails and applied to specific jail code 2013-12-17 17:48:19 +00:00
alasdairdc 5f623596ee Updated check_fail2ban to return performance data for all jails 
Allows perf data from all jails to enable pnp4nagios to display a chart per jail when run with the command:
check_fail2ban -p -w 1 -c 5 -P /usr/bin/fail2ban-client

sample output:
CHECK FAIL2BAN ACTIVITY - CRITICAL - 9 detected jails with 5 current banned IP(s) | apache-noscript.currentBannedIP=0 sendmail.currentBannedIP=0 postfix.currentBannedIP=0 ssh-probe.currentBannedIP=3 ssh-ddos.currentBannedIP=0 apache-multiport.currentBannedIP=0 apache.currentBannedIP=0 ssh.currentBannedIP=2 apache-overflows.currentBannedIP=0
 2013-12-17 17:45:50 +00:00
Daniel Black dd79889904 Merge pull request #484 from grooverdan/more-more-tests 
BF/TST: fix internals of jailreader and add test cases
 2013-12-16 02:29:50 -08:00