4658 Commits (9ed35c423aab1983050f933b128439587947294d)

 

All Branches   

Search

Author	SHA1	Message	Date
sebres	9ed35c423a	Merge branch '0.9' into 0.10 (gh-2317)	6 years ago
Sergey G. Brester	5c44ca714f	Merge pull request #2317 from Yannik/patch-2 ... Fix asterisk filter not catching attackers when port is logged (in pjsip module)	6 years ago
sebres	883864c774	optimizes processing of server-configuration stream by start and reload (no interim outputs produced, several calls of get-functions avoided also).	6 years ago
sebres	34dba44816	MANIFEST: forgotten test file	6 years ago
Sergey G. Brester	487e19420e	Merge pull request #2351 from sebres/0.10-multi-ban-unban-in-jail ... fail2ban-client: multi ban/unban and attempt for set jail	6 years ago
Sergey G. Brester	a48d50efc0	Update ChangeLog	6 years ago
sebres	fc92021211	coverage and few enhancements	6 years ago
sebres	2dd3c546dd	small code review (normalization and duplicated codes removal)	6 years ago
sebres	00a6717953	fail2ban-client: extended with new feature which allows to inform fail2ban about single or multiple attempts (failure) for IP (failure-ID), syntax: ... set <JAIL> attempt <IP> [<failure1> ... <failureN>]	6 years ago
sebres	84cec5e861	implements gh-2349: `fail2ban-client set jain banip/unbanip ip1 .. ipN` extended to ban/unban multiple tickets; ... reorganized banning facilities (addBannedIP moved from filter to actions in order to ban directly without implication of fail-manager in between.	6 years ago
sebres	e30ebb1f3b	closes gh-2277: fixed and optimized cache facilities (operations on OrderedDict are not atomic); increased max-size of IPAddr cache; don't cache raw objects (it is fast enough).	6 years ago
sebres	14f997231d	add test case to cover gh-2277, testOverflowedIPCache testing overflow of IP-cache multi-threaded (2 "parasite" threads flooding cache)	6 years ago
sebres	5a54a44559	provide more meaningful error-message if invalid `datepattern` set; ... fail2ban-regex: catch errors/exceptions by set of parameter, more verbose output if needed (`-v` or log-level `debug` would produce output of call-stack additionally).	6 years ago
Sergey G. Brester	c819a18a0a	Update ChangeLog	6 years ago
sebres	e651bc7866	amend to #1622: jail-reader supports now multi-line option for multi-line action parameter: ... logpath = a.log b.log c.log action = ban[...] = log[logpath="%(logpath)s"] closes gh-2341, ultimate fix for gh-976	6 years ago
sebres	89c611064d	test-cases: be sure the test-files always written with new-line at end	6 years ago
Sergey G. Brester	4108e04ab4	Update ChangeLog	6 years ago
sebres	a13fdcf4f7	closes gh-2314: extended regex for mysql 8.0.13 if used logging with details (e. g. log-error-verbosity = 3, so log output has few additional words enclosed in brackets after "[Note]").	6 years ago
Sergey G. Brester	67247999ff	closes #2313: missing dependency to nftables.service	6 years ago
Yannik Sembritzki	547504873e	Add test case for new asterisk pjsip log syntax which includes the port	6 years ago
Yannik Sembritzki	6b4404b1bc	Fix asterisk filter not catching attackers when port is logged (Fixes #2316)	6 years ago
sebres	c9ba695ba3	minor, no cover for 3.x (2.6 only)	6 years ago
sebres	4a4780be04	test-cases: prevent sporadic timing errors (unban if ban still not occurred)	6 years ago
sebres	0298c8a31e	closes gh-2277: fixed cache-object clean-up process (if max-size reached) used multi-threaded (del can throw KeyError if get/unset changes the list); ... additionally OrderedDict is used now for cache (if available, so >= 2.7) - avoids (slow) search of expired items in full cache and always prefers older objects to remove (like FIFO).	6 years ago
Alexander Koeppe	df9b352bac	Update information reg. ipdns.py as successor for dnsutils.py	6 years ago
sebres	c1ccabc1f9	fixed read of included config-files (`.local` overwrites options of `.conf` for config-files included with before/after)	6 years ago
sebres	9b96a7de89	fix of SafeConfigParserWithIncludes	6 years ago
sebres	0245777c84	SafeConfigParserWithIncludes: fixed read of included config-files (expands with localized version, so `inc.local` overwrites options of `inc.conf` for config-files included with before/after); ... added new test to cover this case.	6 years ago
sebres	555b29e8e6	Merge remote-tracking branch 'remotes/gh-upstream/master' into 0.10	6 years ago
Sergey G. Brester	c40e4c7bad	Merge pull request #2279 from sebres/sshd-filter-gh-2239 ... sshd filter enhancements (gh-2239)	6 years ago
Sergey G. Brester	0ac5c8941c	Update ChangeLog	6 years ago
sebres	1c1d2cc435	introduces new failregex-flag tag `<F-MLFGAINED>` signaled that the access to service was gained (ATM used similar to <F-NOFAIL>, but does not added to matches); ... filter.d/sshd.conf: extended with new rules: - Disconnecting ...: Change of username or service not allowed - Disconnected from ... [preauth] (extra/aggressive mode only)	6 years ago
Sergey G. Brester	189c3f964b	Merge pull request #2276 from dienteperro/patch-1 ... "be" instead of "me" in shorewall.conf	6 years ago
dienteperro	0df221b54b	"be" instead of "me" in shorewall.conf	6 years ago
sebres	657b147c0d	fixed dependency issue if setup invoked using python 3.x: invocation of 2to3 takes place after setup (and __init__.py) loaded; ... closes gh-2255.	6 years ago
sebres	e99635650a	dnsToIp and other DNSUtils primitives uses sets instead of lists now (speed-up search of ip, e. g. ignoreself/ignoreip check process)	6 years ago
sebres	0ae02ba2a1	version bump (back to dev-version)	6 years ago
sebres	aa565eb80e	release 0.10.4 - ten-four-on-due-date-ten-four	6 years ago
Sergey G. Brester	1752c19b6f	Merge pull request #2205 from benrubson/patch-1 ... Add loglevel option to badips.py	6 years ago
Sergey G. Brester	65676baf8c	fixed py3 incompatibility (for some reasons this file seems to be excluded from 2to3), anyway not needed, because int-type is already checked in str2LogLevel	6 years ago
Sergey G. Brester	4b751c84c3	badips.py: Rewrite new bool option "log" as "loglevel" and revert default to log-level (DEBUG).	6 years ago
sebres	6067579464	Fixed action parameter `timeout`: it is a time (integer), so avoid to convert it to string (for replacement); fix substituteRecursiveTags using auto-convert to string. ... Closes gh-2241.	6 years ago
sebres	17da4943df	use short log-names for special pure numeric log-level (e.g. "Level 25" could be truncated by short formats)	6 years ago
sebres	2a4c47ea32	.travis.yml: coveralls doesn't support python 2.6 now	6 years ago
sebres	58b510a5be	filter.d/domino-smtp.conf: ... - recognizes failures logged using another format (something like session-id, IP enclosed in square brackets); - failregex extended to catch connections rejected for policy reasons (gh-2228);	6 years ago
sebres	08f3f12f10	fix sporadic test-cases fails: change debug transmitter-message (sometimes confused with expected "Server ready" of server), better syntax for internal subst _use_flush;	6 years ago
sebres	d01fe9d22a	action.d/*.conf: correct comments for actionstart/actionstop	6 years ago
Ben RUBSON	9d7c0e00c1	Also log number of IPs removed/added	6 years ago
Sergey G. Brester	5b0c3e75d3	Merge pull request #2189 from yarikoptic/bf-initd-exit ... debian-initd: exit with non-0 if fail, account that 255 is "Ok" exit code, use 255 explicitly instead of -1	6 years ago
Ben RUBSON	70e53b55c5	Typo	6 years ago