5084 Commits (98c7dd04a403a52e2cd123a6d992b2ac1e96e7c8)

 

All Branches   

Search

Author	SHA1	Message	Date
Sergey G. Brester	98c7dd04a4	Merge pull request #3037 from floppym/bug794931 ... tests: improve detection of readable systemd journal	3 years ago
Mike Gilbert	d91d949e95	tests: improve detection of readable systemd journal ... Look for system.journal in journal sub-directory. Add -readable to the find command. Bug: https://bugs.gentoo.org/794931	3 years ago
Sergey G. Brester	8e3a26bdeb	Merge pull request #3117 from fail2ban/gh-3116 ... filter.d/lighttpd-auth.conf: adjust to the current source code, avoid catch-all's, etc	3 years ago
Sergey G. Brester	ba839af8ad	filter.d/lighttpd-auth.conf: adjusted to the current source code + avoiding catch-all's, etc (gh-3116)	3 years ago
Sergey G. Brester	f8f59dd31a	added test cases covering different messages adjusted to new log-format (gh-3116)	3 years ago
Sergey G. Brester	5ee482bc9a	Merge pull request #3053 from db48x/fix-grammar-of-timestamp-warnings ... Improve grammar and readability of timestamp warnings	3 years ago
Sergey G. Brester	d086317cc8	Update filter.py	3 years ago
Sergey G. Brester	17eed32e03	Update filtertestcase.py	3 years ago
sebres	621d8cae17	restore backwards compatibility for date None	3 years ago
sebres	ec043cd202	simplifying logic and shortening messages (delta in minutes; removed clock synchronization, because it is rarely an issue on fail2ban side, e. g. for remote logs only, etc)	3 years ago
Daniel Brooks	d7afcde2e1	add a warning message for dates in the future ... and a test that checks which message was output for which time deltas.	3 years ago
Daniel Brooks	1929e7a76b	include more specific information in the warning	3 years ago
Daniel Brooks	320a3dcdd5	remove old warnings from filtertestcase.py ... assertLogged only checks that at least one listed message is found, so it isn’t necessary to repeat them in the test.	3 years ago
Daniel Brooks	a98cc08b31	Updated the warning messages created when fail2ban sees unexpected timestamps ... to improve their grammar and to remove jargon. Partially fixes #2822	3 years ago
sebres	974ba688d4	Merge branch 'patch-3098' into 0.10	3 years ago
Sergey G. Brester	7f22c4873a	remove 2to3 in setup (should be called outside before setup)	3 years ago
Sergey G. Brester	1414a44b8e	Update main.yml ... CI: try to install dependencies via apt, add build test	3 years ago
sebres	c0f9348db5	Merge branch 'sebres/gh-3097--fix-unh-except' into 0.10; ... closes #3097	3 years ago
sebres	d709ec8179	GH actions: use newest python version for 3.10 (3.10.0-rc.2)	3 years ago
sebres	ba282b794c	pyinotify: amend to 1e4a14fb25d88e32f3ca9c06fb1d6b8d3b4813ab: one fix more for sporadic runtime error "dictionary changed size during iteration" (watched files)	3 years ago
sebres	e323c148e1	backend systemd: fixes error "local variable 'line' referenced before assignment", introduced in 55d7d9e214f72bbe4f39a2d17aa004d80bfc7299; ... don't update database too often (every 10 ticks or ~ 10 seconds in production); closes gh-3097	3 years ago
sebres	1e4a14fb25	pyinotify: fixes sporadic runtime error "dictionary changed size during iteration" (if something outside changes the pending dict during _checkPending evaluation) - simply deserialize to a list for iteration, without any lock, because unneeded here due to small and mostly empty dictionary (logrotate, etc), not to mention that pending check is normally called once per minute; ... don't call process file inside of server thread calling of addLogPath (always retard it as pending event); ensure to wake-up as soon as possible to process pending events (e. g. if file gets added).	3 years ago
sebres	2f99d5accb	test coverage for unhandled exception in run of several filter (gh-3097)	3 years ago
sebres	e3f2fcfab4	merge point (GHSA-m985-3f3v-cwmm 0.9/0.10)	3 years ago
sebres	2ed414ed09	fixed possible RCE vulnerability, unset escape variable (default tilde) stops consider "~" char after new-line as composing escape sequence ... closes GHSA-m985-3f3v-cwmm for 0.9	3 years ago
sebres	410a6ce5c8	fixed possible RCE vulnerability, unset escape variable (default tilde) stops consider "~" char after new-line as composing escape sequence	3 years ago
sebres	92f90038fa	filter.d/dovecot.conf: extended to match prefix like `conn unix:auth-worker (uid=143): auth-worker<13247>:` (authenticate from external service like exim), gh-2553	4 years ago
sebres	8b984a0135	filter.d\exim-common.conf: pid-prefix extended to match `mx1 exim[...]:` (gh-2553)	4 years ago
sebres	6be1a5a0b1	filter.d/dovecot.conf: fixed "Authentication failure" regex, matches "Password mismatch" in title case (gh-2880)	4 years ago
sebres	8afea37494	filter.d/sendmail-auth.conf: covering several "authentication failure" messages, sendmail 8.16.1 (gh-2757)	4 years ago
sebres	c5f1598a21	filter.d/postfix.conf: extended to cover new vectors: ... - reject: BDAT/DATA from (gh-2927) - (since regex is more precise now) token selector changed to `[A-Z]{4}`, e. g. no matter what a command is supplied now (RCPT, EHLO, VRFY, DATA, BDAT or something else) - matches "Command rejected" and "Data command rejected" now	4 years ago
sebres	ae3e9b9149	filter.d/postfix.conf: extended to cover 2 new vectors: ... - RCPT from unknown, 504 5.5.2, need fully-qualified hostname, gh-2995 - 550 5.7.25 Client host rejected, gh-2996 review combining several regex to single one	4 years ago
sebres	87f717e0e0	filter.d/sendmail-reject.conf: fix reverse DNS for ... (gh-3012)	4 years ago
sebres	1627d4f573	filter.d/sendmail-auth.conf: user not found, closes gh-3030	4 years ago
sebres	ef5c826c74	fixes search for the best datepattern (gh-3020) - e. g. if line is too short, boundaries check for previously known unprecise pattern may fail on incomplete lines (logging break-off, no flush, etc)	4 years ago
sebres	2918849f9e	fixes precise year pattern %ExY - accept years 20xx up to current century (using almost the same pattern in tests and production now)	4 years ago
sebres	319cfefac2	fix travis build (unsupported pythons and pypy versions), update 3.10 in GH actions	4 years ago
sebres	d3f5d2d52b	documentation (interpolation tags)	4 years ago
sebres	f0214b3d36	filter.d/sendmail-reject.conf: fixed regex to consider "Connection rate limit exceeded" with different combination of arguments	4 years ago
sebres	d135aeea16	fixes restore of original logging withing tests (`LogCaptureTestCase.tearDown`) - python 3 seemed still to log wordy after tear down (setting of log.level does not restore the level for related log objects - e. g. for logger of `fail2ban.jail` etc, so `fail2ban-testcases '(testVersion|testLongName).*servertest'` generating messages in stdout handler in testLongName)	4 years ago
sebres	8757563be1	close fork	4 years ago
sebres	e587526ede	tests: add missing constraint (causing incomplete comparison in below cycle if fewer lines as expected was found)	4 years ago
sebres	04aba6168c	fixed typo, `--` is not expected in options declaration, so `--dump-pretty` did never work (only `--dp` is working)	4 years ago
sebres	a45b1c974c	filter.d/ignorecommands/apache-fakegooglebot: added timeout parameter (default 55 seconds) - avoid fail with timeout (default 1 minute) by reverse lookup on some slow DNS services (googlebots must be resolved fast); ... closes gh-2951	4 years ago
sebres	63acc862b1	`action.d/nginx-block-map.conf`: reload nginx only if it is running (also avoid error in nginx-errorlog, gh-2949) and better test coverage for the action	4 years ago
sebres	6f4b6ec8cc	action.d/badips.* removed (badips.com is no longer active, gh-2889)	4 years ago
sebres	e3d43d1241	Merge branch 'fix-rc-on-too-many-failures' into 0.10: resolves RC with uncontrolled growth of failure list (jail with too many matches that did not cause ban, gh-2945)	4 years ago
sebres	92a2242174	amend fixing journal tests (systemd backend only)	4 years ago
sebres	e353fb8024	fixed test cases (ban ASAP also followed in test suite now, so failure reached maxretry causes immediate ban now)	4 years ago
sebres	55d7d9e214	*WiP* try to solve RC on jails with too many failures without ban, gh-2945 ...	4 years ago