Daniel Black
d015f7f4fc
BF/ENH: fixed so xarf-login-attack works
2013-12-01 17:49:35 +11:00
Yaroslav Halchenko
2c1199cce0
Let's progress and mark a2 release toward 0.9.0
2013-11-30 12:25:17 -05:00
Daniel Black
0495aa098e
BF: grep matches on <ip> shouldn't include other IPs
2013-11-30 18:01:45 +11:00
Daniel Black
95845b7b65
BF: complain action could match too many IP addresses
2013-11-30 17:47:10 +11:00
Daniel Black
5cc7173fd4
ENH: add xarf email sender for login-attack type
2013-11-30 14:16:26 +11:00
Yaroslav Halchenko
3a5983ab0b
Merge branch 'bf/syslog-format' of https://github.com/yarikoptic/fail2ban
...
* 'bf/syslog-format' of https://github.com/yarikoptic/fail2ban :
Changelog entries for the last changes
ENH: added optional [PID] matching in recidive.conf
ENH: reintroducing levelnameinto syslog msgs, time stamp and indentation in non-syslog msgs
BF/ENH: include [PID] into logging msgs, remove indentation from syslog messages
Conflicts:
ChangeLog
2013-11-29 19:58:56 -05:00
Daniel Black
f7504d5b64
MRG: conflict in THANKS
2013-11-30 10:39:19 +11:00
Daniel Black
4d86a17641
Merge pull request #453 from grooverdan/master_to_0.9
...
MRG: merge Master to 0.9
2013-11-29 15:37:44 -08:00
Daniel Black
56b6bf7d25
ENH: reduce firewalld-cmd-new -> firewallcmd-new
2013-11-30 10:30:29 +11:00
Daniel Black
04438cd1a1
BF/ENH: mysql jail - rename to mysql-syslog to be consistent with 0.8.13. Add port to syslog defination. Document mysql configuration required for mysql jails
2013-11-30 10:00:59 +11:00
Daniel Black
3f4d179612
BF: smtps not an IANA port - from #447
2013-11-30 09:52:32 +11:00
Daniel Black
fe9e077acf
BF: correct spelling of port for solid-pop3 jail in jail.conf
2013-11-30 09:51:30 +11:00
Daniel Black
86a0a5962a
BF: revert to fail2ban- prefix as f2b- was intended for 0.9
2013-11-30 08:05:20 +11:00
Yaroslav Halchenko
982d5abbef
Merge branch 'namelength20' of https://github.com/grooverdan/fail2ban
...
* 'namelength20' of https://github.com/grooverdan/fail2ban :
DOC: document rational behind 20 character jail name limit
Conflicts:
ChangeLog
2013-11-29 10:09:16 -05:00
Yaroslav Halchenko
25e967f23b
Merge branch 'mysqld-syslog-iptables-name-too-long' of https://github.com/grooverdan/fail2ban
...
* 'mysqld-syslog-iptables-name-too-long' of https://github.com/grooverdan/fail2ban :
BF: jail name mysqld-syslog-iptables too long. removed -iptables. Thanks Stefan (#447 )
Conflicts:
ChangeLog
2013-11-29 10:02:31 -05:00
Yaroslav Halchenko
f2fed88920
Merge pull request #465 from grooverdan/smtps-not-iana-protocol
...
BF: smtps not IANA standard. Closes #447
See http://en.wikipedia.org/wiki/SMTPS for more information on port 465
2013-11-29 06:58:17 -08:00
Daniel Black
2bcc6c66b1
TST: remove python 2.5 from TravisCI
2013-11-29 21:54:36 +11:00
Daniel Black
b9b2ddf996
BF: smtps not IANA standard. Closes #447
2013-11-29 21:47:53 +11:00
Daniel Black
cade746307
BF: jail name mysqld-syslog-iptables too long. removed -iptables. Thanks Stefan ( #447 )
2013-11-29 21:45:11 +11:00
Daniel Black
9e53892708
BF: did remove instead of move
2013-11-29 19:26:24 +11:00
Daniel Black
af4feb0c92
Actions to have f2b- as prefix instead of fail2ban- as per #462
2013-11-29 19:08:38 +11:00
Daniel Black
b157be22d2
TST: pids don't match test case for sshd filter
2013-11-29 16:02:28 +11:00
Daniel Black
fb666b69ff
BF: firewall-cmd-direct-new was too long. Thanks Joel.
2013-11-28 23:35:05 +11:00
Daniel Black
99838440c8
DOC: document rational behind 20 character jail name limit
2013-11-28 23:18:34 +11:00
Daniel Black
227f27ce6b
ENH: added multiline filter for sshd filter
2013-11-25 14:55:41 +11:00
Daniel Black
f80fa7d7a0
Merge pull request #456 from grooverdan/apffix
...
BF: add init section with name for action.d/apf. Closes #398
2013-11-24 13:48:46 -08:00
Daniel Black
13223c33f5
MRG: recidive-protocol-all
2013-11-25 08:22:09 +11:00
Daniel Black
dc154c792e
BF: add init section with name for action.d/apf. Closes #398
2013-11-25 08:08:20 +11:00
Daniel Black
093aee9676
TST: no python-2.5 any more - https://github.com/travis-ci/travis-ci/issues/1668
2013-11-25 07:54:49 +11:00
Yaroslav Halchenko
085ebbe1de
Changelog entries for the last changes
2013-11-24 11:55:58 -05:00
Yaroslav Halchenko
a26d4f42b7
ENH: added optional [PID] matching in recidive.conf
2013-11-24 10:21:02 -05:00
Yaroslav Halchenko
a6f085786c
ENH: reintroducing levelnameinto syslog msgs, time stamp and indentation in non-syslog msgs
...
any indentation from syslog msgs wsa removed -- no need
2013-11-24 10:19:50 -05:00
Yaroslav Halchenko
09e8c9be28
Merge pull request #454 from grooverdan/kernel-timestamp
...
BF: kernel messages can have space. Thanks ag4ve(shawn). Closes #448
2013-11-24 07:02:03 -08:00
Daniel Black
a989787e0d
DOC: more distro bug tracker urls
2013-11-24 18:43:23 +11:00
Daniel Black
9a82bc3c61
BF: kernel messages can have space. Thanks ag4ve(shawn). Closes #448
2013-11-24 18:21:02 +11:00
Daniel Black
98eacdf333
MRG/BF: merge from master. Fix bugs in iso8601
2013-11-24 16:36:06 +11:00
Daniel Black
f2c529ca7b
ENH: move signal.signal(signal.SIGHUP, signal.SIG_IGN) before fork in server. closes #446
2013-11-23 11:33:41 +11:00
Yaroslav Halchenko
d34d8db3d2
BF/ENH: include [PID] into logging msgs, remove indentation from syslog messages
...
Otherwise leads to incorrect parsing of the log messages by syslog(-ng). See
http://bugs.debian.org/730202
I also removed %(levelname)-6s from syslog messages completely since they are
passed to the syslog and it is up to the configuration/admin to decide include
levels into the messages or not (I have checked that at least debug level indeed
goes to /var/log/debug)
2013-11-22 15:57:03 -05:00
Daniel Black
28d8aec511
DOC: Arch Linux link
2013-11-21 07:05:21 +11:00
Daniel Black
24c143b411
Merge pull request #445 from grooverdan/suhosin
...
TST: more test cases for suhosin
2013-11-19 15:23:59 -08:00
Daniel Black
015b403df0
TST: more test cases for suhosin
2013-11-20 10:01:06 +11:00
Yaroslav Halchenko
629e9ae445
Merge pull request #443 from grooverdan/apache-authfix
...
BF: apache filters using error log weren't matched when referer existed ...
2013-11-18 15:53:39 -08:00
Daniel Black
284f811c91
BF: apache filters using error log weren't matched when referer existed in HTTP header
2013-11-19 10:27:55 +11:00
Yaroslav Halchenko
491165c929
Merge pull request #438 from grooverdan/solid-pop3d
...
ENH: filter for Solid-pop3d
2013-11-17 17:34:46 -08:00
Daniel Black
1ea68b2d0c
DOC: filter.d/solid-pop3d - document lack of PAM support. Thanks to Jacques for the log messages
2013-11-18 09:44:26 +11:00
Daniel Black
0eea0a35db
ENH: filter.d/solid-pop3d - added log messages and regexes
2013-11-18 08:58:23 +11:00
Daniel Black
8aa20a7b0e
ENH: credits for #440 recidive jail protocol=all
2013-11-18 07:59:56 +11:00
Daniel Black
dab2ddb9da
ENH: recidive jail to block all protocols. Closes #440
2013-11-18 07:57:16 +11:00
Daniel Black
2c63b1fe93
Merge pull request #439 from yarikoptic/bf/proftpd-millisec
...
ENH: proftpd in Debian (now or forever) has ",milliseconds" in its date format
2013-11-17 12:44:44 -08:00
Daniel Black
b3b9ea4559
ENH: jail for solid-pop3d
2013-11-18 07:42:45 +11:00