Daniel Black
fa85be2eea
DOC/TST: fix configuration path for apache-auth test cases
12 years ago
Daniel Black
03ec7c211b
ENH: could not find a way to trigger filter ^%(_apache_error_client)s authorization failure \(no authenticated user\): \S*\s*$
12 years ago
Daniel Black
8ce9c78474
TST: apache-auth digest logs
12 years ago
Daniel Black
f8b5b3a1ef
ENH: apache-auth - quite a lot of authorization failure messages depending on module. Make a wildcard
12 years ago
Daniel Black
4eca2c0bd5
TST: apache-auth client denied by server configuration
12 years ago
Daniel Black
e0292913eb
ENH/TST: filter, testcase and log entry for apache-auth authorization scheme mod_authz_owner
12 years ago
Daniel Black
40cc336cd5
TST: testcases and logs for apache-auth basic
12 years ago
Steven Hiscocks
bf05f2ac95
Merge branch 'filter-failregex-return'
...
Conflicts:
server/filter.py
12 years ago
Steven Hiscocks
ba29f6bef3
DOC: Update doc in reference to changes for sample testcases
12 years ago
Steven Hiscocks
c2bdfefb62
DOC: Comment to fail2ban-regex - flagging lines matched multiple regexs
12 years ago
Yaroslav Halchenko
e4d759ac94
Merge pull request #283 from yarikoptic/master
...
Roundcube failregex -- anchor at the beginning as well + mandate <HOST> to end with alphanumeric
12 years ago
Yaroslav Halchenko
90ec82669c
DOC: changelog entries for preceeding changes
12 years ago
Yaroslav Halchenko
f6a8a04cf3
ENH: roundcube-auth - adopt for current format with trailing error message. thanks @kwirk for the review/feedback
...
I also used non-greedy .*? for the login portion since not sure if space could
be there and trying to minimize possibility of reacting on injected "from
<HOST>" somewhere within the trailing .*
12 years ago
Yaroslav Halchenko
0a02cfe9e8
ENH: <HOST> must end with alphanumeric \w (not a dot or a dash etc)
...
Otherwise <HOST> regexp might swallow period in the sentence right after the address.
I have decided to enforce alphanumeric instead of switching to non-greedy +? ... because
I think it is closer to what we actually want here
12 years ago
Yaroslav Halchenko
8add63c733
ENH: anchor roundcube-auth at the beginning as well
12 years ago
Yaroslav Halchenko
148cbd8d2a
ENH: heavier debugging -- log split date/log line even for no match. Log matching regex upon match
12 years ago
Steven Hiscocks
1a2b6442a0
ENH+BF+TST: Filter now returns reference to failregex and ignoreregex
...
This avoids duplication of code across fail2ban-regex and samples test
cases. This also now more neatly resolves the issue of double counting
date templates matches in fail2ban-regex.
In addition, the samples test cases now also print a warning message
that not all regexs have samples for them, with future plan to change
this to an assertion.
12 years ago
Yaroslav Halchenko
5bd186b854
ENH(minor): fail2ban-regex comment line doesn't have to have a space after leading #
12 years ago
Steven Hiscocks
2c8747cc76
BF: fail2ban-regex date detector template hits count now correct
...
closes #295
12 years ago
Steven Hiscocks
4855cae487
Merge branch 'sample-log-meta-data'
...
Conflicts:
testcases/files/logs/dovecot
12 years ago
Steven Hiscocks
1116f23151
TST: Sample log regex test now warns if no log for a filter
...
Also checks that at least some tests are present
12 years ago
Yaroslav Halchenko
e562515df7
Merge pull request #292 from grooverdan/solaris-doc
...
DOC: shorten example and provide clarification and spelling fix
12 years ago
Steven Hiscocks
728399c39e
Merge pull request #281 from kwirk/dovecot-filter
...
ENH: dovecot filter additions for session, time value and blank user
12 years ago
Steven Hiscocks
94376bfbe1
TST: Handle lack of `json` library in python2.5 for samples test case
12 years ago
Daniel Black
09850d6ba5
DOC: shorten example and provide clarifcation and spelling fixes
12 years ago
Steven Hiscocks
40f67c64b8
TST: Test sample logs' entries are matched by filter regexs
12 years ago
Steven Hiscocks
606e97683b
BF: jail.conf multiport actions previously using single port iptables
12 years ago
Daniel Black
1bb427cc14
TST: remove dup test log entry
12 years ago
Daniel Black
975999591f
ENH/DOC: more realm mismatch errors. Documented filter design criteria
12 years ago
Daniel Black
bf54db7ce7
ENH: ChangeLog notes for apache-auth enhancements
12 years ago
Daniel Black
10e3be857a
ENH: apache-auth filter added mod_auth_digest message
12 years ago
Daniel Black
384b72a535
ENH: apache-auth filter - client wrong auth
12 years ago
Daniel Black
fce431add8
ENH: add mod_authz_core failures to apache-auth
12 years ago
Daniel Black
6ce41a611d
BF: fix filter on apache-auth. Closes #286
12 years ago
Daniel Black
e433a5c633
Merge pull request #260 from grooverdan/develop
...
DOC: developing filters without DoS + close/fix/resolves messages in commits
12 years ago
Daniel Black
424da92601
DOC: close message for commits.
12 years ago
Daniel Black
1d6d5a7aae
DOC: ChangeLog merge confict
12 years ago
Daniel Black
174e3dba6d
DOC: Note on new dependency - ed for hosts_deny
12 years ago
Daniel Black
5412d7336f
DOC: ChangeLog confict
12 years ago
Daniel Black
1f5097649c
DOC: ChangeLog for exim-spam.conf filter and tabs->spaces in changelog
12 years ago
Yaroslav Halchenko
5f04b4954f
Merge pull request #280 from yarikoptic/master
...
BF+ENHs: polling backend tracks ino and size now in addition to mtime, filters do not read file unless it has content + few other minor issues
12 years ago
Daniel Black
619603fe05
BF: match asterisk InvalidPassword correctly
12 years ago
Steven Hiscocks
bfa2b9dec3
ENH: dovecot filter additions for session, time value and blank user
12 years ago
Yaroslav Halchenko
04b8069cee
ENH: adjust sendmail-whois 'active' example to have also sendername in it
12 years ago
Yaroslav Halchenko
e332efb7cd
Merge pull request #279 from 7adietri/feature/configurable-sender-name
...
Move sendmail settings to common file, make sender name configurable
12 years ago
Alexander Dietrich
2155f6bfa5
Update ChangeLog and jail.conf example
12 years ago
Yaroslav Halchenko
e282d6b1c7
ENH: Remove unused any longer _ctime helper
12 years ago
Yaroslav Halchenko
404574499d
BF: fail2ban-testcases -- use full "warning" instead of warn for the verbosity dictionary
12 years ago
Yaroslav Halchenko
5df6796e69
ENH: DNS resolution -- catch parent exception
...
IMHO there is no good reason to capture only gaierror.
on my network it was consistent to error out with
======================================================================
ERROR: testIgnoreIPNOK (testcases.filtertestcase.IgnoreIP)
----------------------------------------------------------------------
Traceback (most recent call last):
File "/home/yoh/deb/gits/fail2ban/testcases/filtertestcase.py", line 166, in testIgnoreIPNOK
self.assertFalse(self.filter.inIgnoreIPList(ip))
File "/home/yoh/deb/gits/fail2ban/server/filter.py", line 277, in inIgnoreIPList
ips = DNSUtils.dnsToIp(i)
File "/home/yoh/deb/gits/fail2ban/server/filter.py", line 625, in dnsToIp
return socket.gethostbyname_ex(dns)[2]
error: [Errno 11] Resource temporarily unavailable
with this commit tests would pass normally as they should
12 years ago
Yaroslav Halchenko
5d7ab9e7fb
DOC: Changelog for preceding changes
12 years ago