Daniel Black
b9cd492e9f
Merge pull request #555 from grooverdan/nagios_fix
...
BF: nagios fix
11 years ago
Daniel Black
3ee6e993c6
MRG: merge ChangeLog for nagios fix
11 years ago
Daniel Black
fecb07f36d
MRG: filter substition
11 years ago
Daniel Black
db7b7bfefa
Credits for groupoffice
11 years ago
alasdairdc
67c44a5001
Update ChangeLog
11 years ago
Daniel Black
a8e0498389
BF: add expression for ssh filter for code 3: SSH2_DISCONNECT_KEY_EXCHANGE_FAILED. closes gh-289
11 years ago
Daniel Black
23f0b854da
MRG: merge in freeswitch
11 years ago
Daniel Black
05b159c74b
Merge pull request #464 from grooverdan/increase-jail-name-length
...
ENH: Actions to have f2b- as prefix instead of fail2ban- as per #462
11 years ago
Daniel Black
3d1a1afca4
MRG: to more recent 0.9
11 years ago
Daniel Black
7c09a61ca5
ENH: add apache-botsearch. Closes gh-544
11 years ago
Daniel Black
b8536490ef
ENH: filter for stunnel from fail2ban wiki
11 years ago
Daniel Black
04d28fd2e1
ENH: add filter freeswitch - as raised on mailing list
11 years ago
Daniel Black
117d3b0466
MRG: horde filter from master
11 years ago
Daniel Black
83f3aeb308
ENH: filter for horde
11 years ago
Daniel Black
9c7bb3b97e
ENH: exim-spam to take honeypot email address as argument. Closes #541
11 years ago
Daniel Black
391b5fc883
MRG: from master again 2014-01-01
11 years ago
Daniel Black
1b037a6f29
DOC: document addition of filter options substitution into failregex/ignoreregex
11 years ago
Daniel Black
856407379b
ENH: add filter openwebmail. Closes gh-543.
11 years ago
Daniel Black
332d37f363
DOC: python-2.6 minimium now. Closes gh-526
...
Clean up ChangeLog and README.md to reflect these changes.
Remove credit from developers for individual changes to be consistent
with the 0.8.12 ChangeLog. Update summary and priority of items listed
in ChangeLog.
11 years ago
Daniel Black
e220210dc4
DOC: fix ChangeLog entry for exim-spam
11 years ago
Daniel Black
dbca949e5e
DOC: typo in ChangeLog
11 years ago
Daniel Black
d727ba639a
ENH: exim-spam to include spamassassin log entry. Closes gh-533
11 years ago
Daniel Black
4a0e428563
DOC: change log for asynchat.push change
11 years ago
Daniel Black
c074773805
ENH: apache modsecurity from 0.9 branch
11 years ago
Daniel Black
be382dae4d
MRG: ufw changelog conflicts
11 years ago
Daniel Black
1f6ece2a40
Merge pull request #490 from grooverdan/firewallcmd-ipset
...
ENH: add firewallcmd-ipset
11 years ago
Daniel Black
ea2a13946e
TST: more test of filters
11 years ago
Daniel Black
c9cfdca396
ENH: add filter for apache-modsecurity
11 years ago
Daniel Black
d3c065bf76
ENH: add PyPy compatibility
11 years ago
Daniel Black
1b7df1181f
BF: apache-2.4 log format fix. Closes gh-516
11 years ago
Yaroslav Halchenko
7af58b9984
Merge branch 'apache-noscripts' of https://github.com/grooverdan/fail2ban
...
* 'apache-noscripts' of https://github.com/grooverdan/fail2ban :
ENH: apache-noscript now matched php-cgi scripts. Closes gh-503
Conflicts:
ChangeLog -- two new entries collided, Reformatted the merged one a bit
11 years ago
Daniel Black
a9b7d33c51
ENH: apache-noscript now matched php-cgi scripts. Closes gh-503
11 years ago
Steven Hiscocks
d22716ab63
ENH: Add nsd filter and amend DateEpoch to match date format
11 years ago
alasdairdc
04c267c307
Updated Changelog
11 years ago
Daniel Black
7c0efc8ec8
MRG: merge so far - flushLogs not working yet
11 years ago
Steven Hiscocks
66e9f06feb
DOC: ChangeLog moved python3 support to refactoring
11 years ago
Steven Hiscocks
401d8aba1f
DOC: Update ChangeLog with systemd backend and persistent database
11 years ago
Daniel Black
f1e593da67
DOC: Changelog for adding firewallcmd-ipset
11 years ago
Daniel Black
f35345ecaa
ENH: add ufw action based off Guilhem Lettron's work in lp-#701522. Closes gh-455
11 years ago
Daniel Black
13ccebe78f
BF: fix actioncheck in firewallcmd
11 years ago
Daniel Black
66374913ec
ENH: add squid filter
11 years ago
Daniel Black
f385439a41
MRG: ChangeLog merge
11 years ago
Daniel Black
80df01bf15
Merge pull request #468 from grooverdan/xarf
...
ENH: action.d/Xarf reporting of messages
11 years ago
Steven Hiscocks
7115f64f83
Merge pull request #470 from grooverdan/flush-logs
...
BF: create flushlogs command to prevent logrotation clobbering logtarget...
11 years ago
Daniel Black
e07ba41870
Merge pull request #463 from grooverdan/firewall-cmd-direct-new-length-too-long
...
BF: firewall-cmd-direct-new was too long. Thanks Joel.
11 years ago
Daniel Black
b5d6310d28
BF: create flushlogs command to prevent logrotation clobbering logtarget. Closes gh-458
11 years ago
Daniel Black
9c1a679b7f
DOC: changelog for xarf-login-attack action
11 years ago
Yaroslav Halchenko
2c1199cce0
Let's progress and mark a2 release toward 0.9.0
11 years ago
Daniel Black
95845b7b65
BF: complain action could match too many IP addresses
11 years ago
Yaroslav Halchenko
3a5983ab0b
Merge branch 'bf/syslog-format' of https://github.com/yarikoptic/fail2ban
...
* 'bf/syslog-format' of https://github.com/yarikoptic/fail2ban :
Changelog entries for the last changes
ENH: added optional [PID] matching in recidive.conf
ENH: reintroducing levelnameinto syslog msgs, time stamp and indentation in non-syslog msgs
BF/ENH: include [PID] into logging msgs, remove indentation from syslog messages
Conflicts:
ChangeLog
11 years ago
Daniel Black
f7504d5b64
MRG: conflict in THANKS
11 years ago
Yaroslav Halchenko
982d5abbef
Merge branch 'namelength20' of https://github.com/grooverdan/fail2ban
...
* 'namelength20' of https://github.com/grooverdan/fail2ban :
DOC: document rational behind 20 character jail name limit
Conflicts:
ChangeLog
11 years ago
Yaroslav Halchenko
25e967f23b
Merge branch 'mysqld-syslog-iptables-name-too-long' of https://github.com/grooverdan/fail2ban
...
* 'mysqld-syslog-iptables-name-too-long' of https://github.com/grooverdan/fail2ban :
BF: jail name mysqld-syslog-iptables too long. removed -iptables. Thanks Stefan (#447 )
Conflicts:
ChangeLog
11 years ago
Daniel Black
b9b2ddf996
BF: smtps not IANA standard. Closes #447
11 years ago
Daniel Black
cade746307
BF: jail name mysqld-syslog-iptables too long. removed -iptables. Thanks Stefan ( #447 )
11 years ago
Daniel Black
af4feb0c92
Actions to have f2b- as prefix instead of fail2ban- as per #462
11 years ago
Daniel Black
fb666b69ff
BF: firewall-cmd-direct-new was too long. Thanks Joel.
11 years ago
Daniel Black
99838440c8
DOC: document rational behind 20 character jail name limit
11 years ago
Daniel Black
227f27ce6b
ENH: added multiline filter for sshd filter
11 years ago
Daniel Black
13223c33f5
MRG: recidive-protocol-all
11 years ago
Yaroslav Halchenko
085ebbe1de
Changelog entries for the last changes
11 years ago
Daniel Black
9a82bc3c61
BF: kernel messages can have space. Thanks ag4ve(shawn). Closes #448
11 years ago
Daniel Black
98eacdf333
MRG/BF: merge from master. Fix bugs in iso8601
11 years ago
Yaroslav Halchenko
629e9ae445
Merge pull request #443 from grooverdan/apache-authfix
...
BF: apache filters using error log weren't matched when referer existed ...
11 years ago
Daniel Black
284f811c91
BF: apache filters using error log weren't matched when referer existed in HTTP header
11 years ago
Yaroslav Halchenko
491165c929
Merge pull request #438 from grooverdan/solid-pop3d
...
ENH: filter for Solid-pop3d
11 years ago
Daniel Black
8aa20a7b0e
ENH: credits for #440 recidive jail protocol=all
11 years ago
Daniel Black
dab2ddb9da
ENH: recidive jail to block all protocols. Closes #440
11 years ago
Yaroslav Halchenko
82174ea4c4
Changelog for preceding proftpd date format change
11 years ago
Daniel Black
88eff70774
ENH: filter.d/solid-pop3d added
11 years ago
Daniel Black
ed212fcdcc
DOC: new ChangeLog header
11 years ago
Daniel Black
1ac7b53cad
MRG: merge from master
11 years ago
Daniel Black
d0498bec69
DOC: finalise 0.8.11 release
11 years ago
Daniel Black
eb9663eb4f
BF/ENH: asterisk connection ID is a hex not decimal number. Add "Rejecting unknown SIP connection from <HOST>" regex thanks to Jonathan Lanning
11 years ago
Yaroslav Halchenko
49024fe6ea
DOC: minor typos in ChangeLog
11 years ago
Yaroslav Halchenko
ea8fce6308
Merge pull request #426 from yarikoptic/bf/openssh6.3-regex-injection
...
openssh 6.3 regex injection vectors: inject into ruser and/or exploiting pre-specified limits set for user provided data
11 years ago
Daniel Black
d6bbe03861
Merge pull request #424 from grooverdan/nginx-auth
...
ENH: add filter.d/nginx-http-auth. Partially forfils #405
11 years ago
Yaroslav Halchenko
750e0c1e3d
BF: disallow exploiting of non-greedy .* in previous fix by providing too long rhost -- do not impose length limits for user-provided input
...
since daemon might eventually change reported length and we would need to adjust anyways. So limiting
in length does not provide additional security but allows for a possible injection vector
11 years ago
Yaroslav Halchenko
eace931c19
Changelog for prior changes (gen_buildbots)
11 years ago
Daniel Black
a148d35d70
ENH: add filter.d/nginx-http-auth. Partially forfills #405
11 years ago
Daniel Black
cb982ef921
ENH: multiline filter for sendmail-spam. Closes gh-418
11 years ago
Yaroslav Halchenko
28ee7ba123
DOC: keeping Changelog release-phrases uniform, simplified intro, unified
11 years ago
Yaroslav Halchenko
f26fba9c19
DOC: Untabifying and reindenting a bit ChangeLog
11 years ago
Daniel Black
0730db9b2b
Merge pull request #416 from grooverdan/debian-bug-665925-wuftpd-pam
...
BF: wuftpd pam filter fix (Debian bug 665925)
11 years ago
Daniel Black
e55b24c533
BF: fix dovecot filter for newer failure message. Closes Debian bug #709324
11 years ago
Daniel Black
8b54523316
BF: fix to filter.d/wuftp to support pam authentication - Debian bug #665925
11 years ago
Daniel Black
ac1f45d18c
Merge pull request #412 from grooverdan/firewalld
...
ENH: enhance firewall-cmd to use firewall-0.8.3's --remove-rules
11 years ago
Daniel Black
87f68d7564
firewalld-0.3.8 release that support --remove-rules out so documenting this.
11 years ago
Daniel Black
47d35c9d80
MRG: 0.8.11 to 0.9
...
Epnoc of selinux is now true UTC
Merge multiline support and date detection in filter
11 years ago
Daniel Black
4ec0e3f087
DOC: version 0.8.11.pre1
11 years ago
Daniel Black
3b2083b06d
DOC: ChangeLog header and merge
11 years ago
Daniel Black
2810f97fe5
DOC: merge ChangeLog
11 years ago
Daniel Black
3a4ba2dba6
DOC: ChangeLog - TODO top summary before final release
11 years ago
Daniel Black
c19a685ee3
DOC: version 0.8.11.pre
11 years ago
Daniel Black
8441539988
DOC: reorder bits of changelog
...
The enhancements list was too long an maybe not always appropriate.
Reclassified changes to filters to catch new versions as bug fixes
since the new version of the application is effectively broken.
Moved large enhancements to New Features.
11 years ago
Daniel Black
c3f9c9aa60
BF: filter.d/dropbear
...
Add PAM failures which is in dropbear-2013.60 in srv-authpam.c
Patch
http://www.unchartedbackwaters.co.uk/files/dropbear/dropbear-0.52.patch
obviously has exit with lower case e so adjust regex for both.
svr-authpasswd.c in 2013.60 (at bottom) for second regex ends after the
IP so the regex was altered.
.*\s* can be compressed to .*
11 years ago
Daniel Black
95f3f38682
MRG: merge ChangeLog and jail.conf
11 years ago
Daniel Black
c7b6d789ca
DOC: add ChangeLog for #392
11 years ago
Daniel Black
e3150044fd
BF: fix selinux
...
TST: ignore *common.conf files in test cases as these are included
BF: Remove USER_LOGIN from selinux-ssh as its a duplicate message
ENH: add sample jail.conf
11 years ago
Daniel Black
d451c2a231
FIX: vsftp improvements from Rich Mellor on mailing list
11 years ago
Daniel Black
88d8111db1
DOC: changelog for selinux-ssh too
11 years ago
Daniel Black
b61fe0f12d
Merge pull request #378 from grooverdan/sasl
...
ENH: filter.d/postfix-sasl - anchor regex at start and rename from filter.d/sasl
11 years ago
Daniel Black
4ecc063bd0
ENH: rename filter.d/sasl -> filter.d/postfix-sasl
11 years ago
Daniel Black
9ca5db7059
DOC: firewalld distro agnostic
11 years ago
Daniel Black
0d8d1ae26c
ENH: new action.d/firewall-cmd-direct-new.conf from Redhat Bugzilla #979622
11 years ago
Daniel Black
123ad1cc9c
MRG: Merge branch 'asterisk-common-jail'
11 years ago
Daniel Black
6ef33981e3
ENH: new asterisk jail to replace asterisk-(tcp|udp) (now that gh-37 is fixed)
11 years ago
Daniel Black
351eb5ec8f
ENH: filter.d/qmail - anchor at start. Add another regex for http://www.tjsi.com/rblsmtpd/faq/ patch to rblsmtpd
11 years ago
Daniel Black
2d1bd54439
Merge pull request #379 from grooverdan/webmin
...
ENH: filter.d/webmin anchor at start and use syslog
11 years ago
Yaroslav Halchenko
500968874e
Merge pull request #381 from grooverdan/suhosin
...
ENH: filter.d/suhosin - anchor regex at start
11 years ago
Yaroslav Halchenko
a7b1b802e0
Merge pull request #382 from grooverdan/vsftpd
...
Vsftpd
11 years ago
Daniel Black
46386412a4
ENH: filter.d/vsftpd - pam regex as syslog and anchored at start
11 years ago
Daniel Black
9637c27873
ENH: filter.d/suhosin - anchor regex at start
11 years ago
Daniel Black
13bcc9aa84
ENH: filter.d/sogo-auth - anchor regex at start
11 years ago
Daniel Black
b64bf3fa7b
ENH: filter.d/webmin anchor at start and use syslog
11 years ago
Daniel Black
f4c7c8f4b3
ENH: sasl - anchor regex at start
11 years ago
Daniel Black
c1d1c181ce
DOC: document time detector changes more thoroughly
11 years ago
Daniel Black
dd10eaa5c0
DOC: improve ChangeLog entry
11 years ago
Daniel Black
caf284d518
DOC: ChangeLog deconflict
11 years ago
Daniel Black
ba8183b116
Merge pull request #372 from grooverdan/uw-imap
...
ENH: filter.d/uwimap-auth added. Closes #18
11 years ago
Daniel Black
a1eaa5f755
ENH: filter.d/selinxu added. Closes #296
11 years ago
Daniel Black
778f09debe
DOC/ENH: __md5hex regex defination to common.conf. Document debian bug #
11 years ago
Daniel Black
b3b62d65bf
ENH: filter.d/uwimap-auth added. Closes #18
11 years ago
Daniel Black
2ad26682a9
DOC: ChangeLog for filter.d/sshd
11 years ago
Daniel Black
e12d389c65
MRG/DOC: jail.conf resolution, ChangeLog fixes
11 years ago
Mark McKinstry
ea112b450b
add ChangeLog and THANKS entry
11 years ago
Daniel Black
4b5ecbccd1
ENH: debuggex URLs with fail2ban-regex
11 years ago
Daniel Black
9805d39b60
MRG: merge date changes to support timezones
11 years ago
Daniel Black
8c2a5612ed
DOC: resolve ChangeLog conflicts
11 years ago
Daniel Black
2a805452c6
DOC: resolve ChangeLog conflicts
11 years ago
Daniel Black
3be7dcd701
DOC: resolve ChangeLog conflicts
11 years ago
Yaroslav Halchenko
596abde712
Merge pull request #352 from grooverdan/recidive
...
ENH: filter.d/recidive - anchor regex at start and support f2b SYSLOG target
11 years ago
Daniel Black
30bb1a77a3
ENH: added syslog prefix to pam-generic filter. Disable regex match for pre 2006 (< 0.99.2.0) versions on linux-pam
11 years ago
Daniel Black
ee497ff1cb
ENH: filter mysqld-auth can be a is a syslog based service so anchor it using syslog prefix
11 years ago
Daniel Black
13ec9d58c0
ENH: filter gssftpd is a syslog based service so anchor it using syslog prefix
11 years ago
Yaroslav Halchenko
bb32295b50
DOC: minor - untabified few entries in the ChangeLog
11 years ago
Yaroslav Halchenko
38b07ca46e
BF: catch and report exceptions while executing commands in client interactive mode ( Close #353 )
11 years ago
Daniel Black
504111b0b1
ENH: filter.d/recidive - anchor regex at start and support f2b SYSLOG target
11 years ago
Daniel Black
d0098b0213
ENH: add timezone offest and subsecond support to Datedetector
11 years ago
Daniel Black
1f1a56174f
MRG: merge from master
11 years ago
Daniel Black
ad291d7e38
Merge pull request #346 from grooverdan/bsd-ipfw-default-unreach-port
...
BF: action.d/bsd-ipfw - use blocktype instead of unused action for icmp ...
11 years ago
Daniel Black
e5f1a7f050
Merge pull request #344 from grooverdan/osx
...
ENH: OSX ipfw based on Andy Fragen's work
11 years ago
Yaroslav Halchenko
8ae55fe03b
ChangeLog entries (+few typo fixes) for the last merges
11 years ago
Daniel Black
6b0e2289d4
Merge pull request #335 from grooverdan/gh-333-bind
...
ENH: filter.d/named-refused.conf - BIND 9.9.3 regex changes. Closes gh-333
11 years ago
Daniel Black
f2bcf84893
BF: action.d/bsd-ipfw - use blocktype instead of unused action for icmp rejecting blocked packets
11 years ago
Daniel Black
b31799a322
ENH: add action.d/osx-afctl anonymously contributed on f2b wiki
11 years ago
Daniel Black
908d4adf6f
DOC: credits and thanks for Andy for osx-ipfw
11 years ago
Daniel Black
7cc3e8a8c0
BF: Invert expression on actionstop in bsd-ipfw.conf to ensure exit status 0 on success. Closes gh-343
11 years ago
Daniel Black
d5684a0834
BF: filter.d/routecube-auth - time offset can be positive or negative
11 years ago
Daniel Black
1aabee20f6
DOC: credits for gh-338
11 years ago
Daniel Black
ef903db3c9
ENH: filter.d/named-refused.conf - BIND 9.9.3 regex changes. Closes gh-333
11 years ago
Daniel Black
cfb7dba268
DOC: merge ChangeLog
11 years ago
Daniel Black
b589533d69
Merge branch 'master' into kwirk-merge
...
Conflicts:
ChangeLog
testcases/files/logs/dropbear
11 years ago
Daniel Black
ced271b908
ENH: date for apache-2.4 - adds milliseconds
11 years ago
Yaroslav Halchenko
c84a2e595a
ENH(BF): put 'standard' template after more detailed ones with day of week and year
...
otherwise years present in the freshly contributed by Dan apache regexes do not match
although should have. I had also to adjust failing now vsftpd test
11 years ago
Daniel Black
a9eb8a76c6
merge of change log and apache-auth differences
11 years ago
Yaroslav Halchenko
42f3aa9f62
Merge pull request #329 from grooverdan/bind-unauth-zonetransfer
...
Bind unauth zonetransfer. Closes #323
11 years ago
Daniel Black
6a36ff1a4a
BF: order mailx arguments with dest email address last - redhat bugzilla 998020. Closes gh-328
11 years ago
Daniel Black
61d43608ae
ENH: filter.d/postfix - add filter for VRFY. Closes gh-322
11 years ago
Daniel Black
5d451bc4d6
ENH: add refused zone tranfer to named-refused filter. closes #323
11 years ago
Daniel Black
d5291517a7
MISC: merge from master
12 years ago
Daniel Black
56faf7f5ad
DOC: fix ChangeLog merge
12 years ago
Steven Hiscocks
11100a2fc0
DOC: Changelog additions for regex changes
12 years ago
Daniel Black
fcf79b475f
ENH: new filter perdition.conf
12 years ago
Steven Hiscocks
1eea0dcec8
Merge branch 'master' into 0.9
...
Conflicts:
ChangeLog
bin/fail2ban-regex
bin/fail2ban-testcases
config/jail.conf
fail2ban/server/failregex.py
fail2ban/server/filter.py
fail2ban/tests/files/logs/lighttpd
fail2ban/tests/files/logs/mysqld.log
fail2ban/tests/files/logs/wu-ftpd
fail2ban/tests/filtertestcase.py
fail2ban/tests/utils.py
testcases/files/logs/lighttpd
testcases/files/logs/lighttpd-auth
testcases/files/logs/mysqld-auth
testcases/files/logs/mysqld.log
testcases/files/logs/wu-ftpd
testcases/files/logs/wuftpd
12 years ago
Yaroslav Halchenko
90ec82669c
DOC: changelog entries for preceeding changes
12 years ago
Steven Hiscocks
728399c39e
Merge pull request #281 from kwirk/dovecot-filter
...
ENH: dovecot filter additions for session, time value and blank user
12 years ago
Daniel Black
ab10664b57
ENH: action.d/hostsdeny to take daemon_list arguement as suggested in README.Solaris
12 years ago
Daniel Black
bf54db7ce7
ENH: ChangeLog notes for apache-auth enhancements
12 years ago
Daniel Black
6ce41a611d
BF: fix filter on apache-auth. Closes #286
12 years ago
Daniel Black
1d6d5a7aae
DOC: ChangeLog merge confict
12 years ago
Daniel Black
174e3dba6d
DOC: Note on new dependency - ed for hosts_deny
12 years ago
Daniel Black
5412d7336f
DOC: ChangeLog confict
12 years ago
Daniel Black
1f5097649c
DOC: ChangeLog for exim-spam.conf filter and tabs->spaces in changelog
12 years ago
Yaroslav Halchenko
5f04b4954f
Merge pull request #280 from yarikoptic/master
...
BF+ENHs: polling backend tracks ino and size now in addition to mtime, filters do not read file unless it has content + few other minor issues
12 years ago
Steven Hiscocks
bfa2b9dec3
ENH: dovecot filter additions for session, time value and blank user
12 years ago
Alexander Dietrich
2155f6bfa5
Update ChangeLog and jail.conf example
12 years ago
Yaroslav Halchenko
5d7ab9e7fb
DOC: Changelog for preceding changes
12 years ago
Daniel Black
256f60adae
DOC: improved log message
12 years ago
Yaroslav Halchenko
e6ebcf6687
Merge branch 'dovecot' of https://github.com/grooverdan/fail2ban
...
* 'dovecot' of https://github.com/grooverdan/fail2ban :
ENH: remove non-capturing groups for readibility
BF: fix dovecot filter for when no TLS is enabled on pop/imap
Conflicts:
ChangeLog -- changelog entries. Also untabified few other spots
12 years ago
Yaroslav Halchenko
f0f237fa05
Merge pull request #269 from grooverdan/asterisk
...
ENH: filter.d/asterisk - consolidate log prefix regex and add a few fail messages
12 years ago
Daniel Black
aebd24ec54
BF: replace with ed so its cross platform, fixes permission problem gh-266, and Yaroslav doesn't revert to perl
12 years ago
Daniel Black
72f9e6a51e
ENH/TST: more samples and rejection types for sender verify fail and rejected RCPT
12 years ago
Daniel Black
3b76fc79f9
BF: fix dovecot filter for when no TLS is enabled on pop/imap
12 years ago
Steven Hiscocks
1dbba35cd9
Merge branch 'master' into 0.9
...
Conflicts:
fail2ban/client/jailreader.py
fail2ban/tests/clientreadertestcase.py
fail2ban/tests/files/logs/sshd
12 years ago
Yaroslav Halchenko
1b170b2aef
BF: support apache 2.4 more detailed error log format. Close #268
12 years ago
Yaroslav Halchenko
6d331bcbea
BF: make colon after [daemon] optional. Close #267
12 years ago
Daniel Black
fa7a105483
ENH: filter.d/asterisk - consolidate log prefix regex and add a few fail messages
12 years ago
Yaroslav Halchenko
b9e971c25d
Merge branch 'exim' of https://github.com/grooverdan/fail2ban
...
* 'exim' of https://github.com/grooverdan/fail2ban :
DOC: credits/blame to me for changes to exim
ENH: new exim filter regexs. Also note a begining PID in this format. Thanks to ftoppi for the log entries
TST/ENH: Improve regex around exim
12 years ago
Yaroslav Halchenko
61f81c6b2f
Changelog entries with close statements for recent changes
12 years ago
Yaroslav Halchenko
2974cac40c
RF: log all logging output from fail2ban-client to stderr. Close #264
...
otherwise it
1. 'interferes' with meaninful output of the client
2. if ERROR is logged it better go to stderr and separating ERROR from other levels is not that transparent with python's logging
12 years ago
Yaroslav Halchenko
8487cb2e90
Merge commit '0.8.10-31-g1ab0f0f' into 0.9
...
* commit '0.8.10-31-g1ab0f0f': (24 commits)
BF/ENH: Incorrect authentication data doesn't need tailier so that's optional. Also gained log entry for Unrouteable address
ENH: readibility thanks to Yaroslav
DOC: Changelog for fail2ban-regex RF
DOC: Changelog for asterisk hardening
ENH: fail2ban-regex -- add specification of loglevels to enable
RF: reworked -regex cmdline tool to use optparse, some unification and enhancement of outputs
ENH: 'heavydebug' level == 5 for even more debugging in tricky cases
ENH: asterisk -- use \S instead of [^:] + prefix failregex with ^\[
BF: missed a space
BF: [SSL-out] is optional in assp
ENH: regex hardening on assp
ENH: anchor a bit mor. Use \d and \w where possible. Escape a literal .
TST: attempts at injection with username=rhost=1.2.3.4 have no user= logged in dovecot-1.2.15
ENH: proftpd chan accept usernames with spaces
ENH: injection of fail data into USER field
ENH: dovecot regexs rewritten and extra failures
ENH: proftp regex hardening and log messages
ENH/BF: exim improvements with sample
BF: fix to proxy port in 3proxy example
ENH: sample log + more specific regex
...
Conflicts: -- it was a messy merge/resolution.
ChangeLog
bin/fail2ban-regex
fail2ban-testcases
fail2ban/server/filter.py
12 years ago
Yaroslav Halchenko
1ab0f0f9e3
Merge branch 'master' of https://github.com/yarikoptic/fail2ban
...
* 'master' of https://github.com/yarikoptic/fail2ban :
DOC: Changelog for fail2ban-regex RF
ENH: fail2ban-regex -- add specification of loglevels to enable
RF: reworked -regex cmdline tool to use optparse, some unification and enhancement of outputs
ENH: 'heavydebug' level == 5 for even more debugging in tricky cases
Conflicts:
ChangeLog
12 years ago
Daniel Black
b8cfda68b8
ENH: new exim filter regexs. Also note a begining PID in this format. Thanks to ftoppi for the log entries
12 years ago
Yaroslav Halchenko
9d4b613ee4
Merge branch '3proxy' of https://github.com/grooverdan/fail2ban
...
* '3proxy' of https://github.com/grooverdan/fail2ban :
BF: fix to proxy port in 3proxy example
ENH: sample log + more specific regex
BF: authentication errors end in 01-09 but the beginning part indicates the service as per https://github.com/fail2ban/fail2ban/issues/246#issuecomment-19327955 thanks to ykimon
BF: need to anchor the start to avoid another repeat of DoS injection like Apache
ENH: stricter regex thanks to Steven Hiscocks (kwirk)
DOC: credits
Conflicts:
ChangeLog
12 years ago
Yaroslav Halchenko
173fe48e77
Merge branch 'exim' of https://github.com/grooverdan/fail2ban
...
* 'exim' of https://github.com/grooverdan/fail2ban :
BF/ENH: Incorrect authentication data doesn't need tailier so that's optional. Also gained log entry for Unrouteable address
ENH: readibility thanks to Yaroslav
ENH/BF: exim improvements with sample
Conflicts:
ChangeLog
12 years ago
Yaroslav Halchenko
ec629ab4e8
Merge branch 'proftpd' of https://github.com/grooverdan/fail2ban
...
* 'proftpd' of https://github.com/grooverdan/fail2ban :
ENH: proftpd chan accept usernames with spaces
ENH: injection of fail data into USER field
ENH: proftp regex hardening and log messages
Conflicts:
ChangeLog
12 years ago
Yaroslav Halchenko
ab2c738b43
Merge branch 'dovecot' of https://github.com/grooverdan/fail2ban
...
* 'dovecot' of https://github.com/grooverdan/fail2ban :
TST: attempts at injection with username=rhost=1.2.3.4 have no user= logged in dovecot-1.2.15
ENH: dovecot regexs rewritten and extra failures
Conflicts:
ChangeLog -- merged entries
12 years ago
Yaroslav Halchenko
948be73115
Merge branch 'assp' of https://github.com/grooverdan/fail2ban
...
* 'assp' of https://github.com/grooverdan/fail2ban :
BF: missed a space
BF: [SSL-out] is optional in assp
ENH: regex hardening on assp
Conflicts:
ChangeLog -- merged the two entries into 1
12 years ago
Yaroslav Halchenko
77044fce35
DOC: Changelog for fail2ban-regex RF
12 years ago