186 Commits (9487ee55629068f8e0dd716485b9844b0be64518)

Author	SHA1	Message	Date
Yaroslav Halchenko	9487ee5562	minor: consistent indentation in dropbear.conf	11 years ago
Jamyn Shanley	a355fab91b	https://github.com/fail2ban/fail2ban/issues/306 ... Fix regex for latest dropbear (keep backwards compatibility). Add test case logfiles. Signed-off-by: Jamyn Shanley <jshanley@gmail.com>	12 years ago
Jamyn Shanley	8936f2cd02	fail2ban-users: Sebastian Arcus - Detect device auth failures on Asterisk 11	12 years ago
Daniel Black	7d7ef08145	ENH: authentication_id can be an imap4 quoted string, whatever that is, so using .+ as its id	12 years ago
Daniel Black	abc4146079	ENH: perdition proxies other types hence daemon can include (perdidtion.(imap|pop)s?|managesieve). Also support local authentication resulting in the log message: local authentication failure	12 years ago
Daniel Black	fcf79b475f	ENH: new filter perdition.conf	12 years ago
Yaroslav Halchenko	f6a8a04cf3	ENH: roundcube-auth - adopt for current format with trailing error message. thanks @kwirk for the review/feedback ... I also used non-greedy .*? for the login portion since not sure if space could be there and trying to minimize possibility of reacting on injected "from <HOST>" somewhere within the trailing .*	12 years ago
Yaroslav Halchenko	8add63c733	ENH: anchor roundcube-auth at the beginning as well	12 years ago
Steven Hiscocks	728399c39e	Merge pull request #281 from kwirk/dovecot-filter ... ENH: dovecot filter additions for session, time value and blank user	12 years ago
Daniel Black	5412d7336f	DOC: ChangeLog confict	12 years ago
Daniel Black	619603fe05	BF: match asterisk InvalidPassword correctly	12 years ago
Steven Hiscocks	bfa2b9dec3	ENH: dovecot filter additions for session, time value and blank user	12 years ago
Yaroslav Halchenko	e6ebcf6687	Merge branch 'dovecot' of https://github.com/grooverdan/fail2ban ... * 'dovecot' of https://github.com/grooverdan/fail2ban: ENH: remove non-capturing groups for readibility BF: fix dovecot filter for when no TLS is enabled on pop/imap Conflicts: ChangeLog -- changelog entries. Also untabified few other spots	12 years ago
Yaroslav Halchenko	f0f237fa05	Merge pull request #269 from grooverdan/asterisk ... ENH: filter.d/asterisk - consolidate log prefix regex and add a few fail messages	12 years ago
Daniel Black	e6823149a1	ENH: remove non-capturing groups for readibility	12 years ago
Daniel Black	4777cfd4e7	ENH: split out exim-spam into speparate filter	12 years ago
Daniel Black	ca996ace5e	ENH: remove temporary failures from local_scan in line with comments in gh-258	12 years ago
Daniel Black	9757e1df2b	ENH: make groupings non-capturing	12 years ago
Daniel Black	72f9e6a51e	ENH/TST: more samples and rejection types for sender verify fail and rejected RCPT	12 years ago
Daniel Black	3b76fc79f9	BF: fix dovecot filter for when no TLS is enabled on pop/imap	12 years ago
Daniel Black	0086a7edab	ENH: missed a $	12 years ago
Yaroslav Halchenko	1b170b2aef	BF: support apache 2.4 more detailed error log format. Close #268	12 years ago
Yaroslav Halchenko	6d331bcbea	BF: make colon after [daemon] optional. Close #267	12 years ago
Daniel Black	fa7a105483	ENH: filter.d/asterisk - consolidate log prefix regex and add a few fail messages	12 years ago
Daniel Black	25c3bbfc2f	DOC: credits/blame to me for changes to exim	12 years ago
Daniel Black	b8cfda68b8	ENH: new exim filter regexs. Also note a begining PID in this format. Thanks to ftoppi for the log entries	12 years ago
Daniel Black	d441d61a1e	TST/ENH: Improve regex around exim ... rejected by local_scan now has test cases. Unrouteable address error messages now normalised after looking into exim code.	12 years ago
Yaroslav Halchenko	9d4b613ee4	Merge branch '3proxy' of https://github.com/grooverdan/fail2ban ... * '3proxy' of https://github.com/grooverdan/fail2ban: BF: fix to proxy port in 3proxy example ENH: sample log + more specific regex BF: authentication errors end in 01-09 but the beginning part indicates the service as per https://github.com/fail2ban/fail2ban/issues/246#issuecomment-19327955 thanks to ykimon BF: need to anchor the start to avoid another repeat of DoS injection like Apache ENH: stricter regex thanks to Steven Hiscocks (kwirk) DOC: credits Conflicts: ChangeLog	12 years ago
Yaroslav Halchenko	173fe48e77	Merge branch 'exim' of https://github.com/grooverdan/fail2ban ... * 'exim' of https://github.com/grooverdan/fail2ban: BF/ENH: Incorrect authentication data doesn't need tailier so that's optional. Also gained log entry for Unrouteable address ENH: readibility thanks to Yaroslav ENH/BF: exim improvements with sample Conflicts: ChangeLog	12 years ago
Yaroslav Halchenko	ec629ab4e8	Merge branch 'proftpd' of https://github.com/grooverdan/fail2ban ... * 'proftpd' of https://github.com/grooverdan/fail2ban: ENH: proftpd chan accept usernames with spaces ENH: injection of fail data into USER field ENH: proftp regex hardening and log messages Conflicts: ChangeLog	12 years ago
Yaroslav Halchenko	ab2c738b43	Merge branch 'dovecot' of https://github.com/grooverdan/fail2ban ... * 'dovecot' of https://github.com/grooverdan/fail2ban: TST: attempts at injection with username=rhost=1.2.3.4 have no user= logged in dovecot-1.2.15 ENH: dovecot regexs rewritten and extra failures Conflicts: ChangeLog -- merged entries	12 years ago
Daniel Black	8cc13b5b40	BF/ENH: Incorrect authentication data doesn't need tailier so that's optional. Also gained log entry for Unrouteable address	12 years ago
Daniel Black	a433a8ea5f	ENH: readibility thanks to Yaroslav	12 years ago
Yaroslav Halchenko	948be73115	Merge branch 'assp' of https://github.com/grooverdan/fail2ban ... * 'assp' of https://github.com/grooverdan/fail2ban: BF: missed a space BF: [SSL-out] is optional in assp ENH: regex hardening on assp Conflicts: ChangeLog -- merged the two entries into 1	12 years ago
Yaroslav Halchenko	09302c5c25	ENH: asterisk -- use \S instead of [^:] + prefix failregex with ^\[ ... detected date portion is stripped from the string to be matched, so it is not only the right ] is left, but also the left one ;-)	12 years ago
Daniel Black	7018d81244	BF: missed a space	12 years ago
Daniel Black	a447aa615d	BF: [SSL-out] is optional in assp	12 years ago
Daniel Black	d4940563d3	ENH: regex hardening on assp	12 years ago
Daniel Black	6a09ecff5c	ENH: anchor a bit mor. Use \d and \w where possible. Escape a literal .	12 years ago
Daniel Black	9940cd1b6b	ENH: proftpd chan accept usernames with spaces	12 years ago
Daniel Black	dbe7ffe050	ENH: dovecot regexs rewritten and extra failures	12 years ago
Daniel Black	4c67a269bf	ENH: proftp regex hardening and log messages	12 years ago
Daniel Black	3e3802512a	ENH/BF: exim improvements with sample	12 years ago
Daniel Black	9dbaec0894	ENH: sample log + more specific regex	12 years ago
Daniel Black	8faf84b7f7	BF: authentication errors end in 01-09 but the beginning part indicates the service as per https://github.com/fail2ban/fail2ban/issues/246#issuecomment-19327955 thanks to ykimon	12 years ago
Yaroslav Halchenko	6ccd57813c	BF: anchor apache- filters. Close #248 ... See https://vndh.net/note:fail2ban-089-denial-service for more information	12 years ago
Daniel Black	fd9f9f16e0	BF: need to anchor the start to avoid another repeat of DoS injection like Apache	12 years ago
Daniel Black	f2fa4d53a8	ENH: stricter regex thanks to Steven Hiscocks (kwirk)	12 years ago
Daniel Black	16d63434ef	DOC: credits	12 years ago
Carlos Alberto Lopez Perez	47b063b022	Filter Asterisk: Add AUTH_UNKNOWN_DOMAIN error to list ... * I have been seeing bruteforcing attempts where asterisk fails with AUTH_UNKNOWN_DOMAIN (Not a local domain)	12 years ago