Daniel Black
cb982ef921
ENH: multiline filter for sendmail-spam. Closes gh-418
2013-11-08 08:55:45 +11:00
Daniel Black
47d35c9d80
MRG: 0.8.11 to 0.9
...
Epnoc of selinux is now true UTC
Merge multiline support and date detection in filter
2013-11-02 15:59:05 +11:00
Daniel Black
4ec0e3f087
DOC: version 0.8.11.pre1
2013-10-31 10:51:37 +11:00
Daniel Black
3b2083b06d
DOC: ChangeLog header and merge
2013-10-31 10:44:40 +11:00
Daniel Black
2810f97fe5
DOC: merge ChangeLog
2013-10-31 09:07:06 +11:00
Daniel Black
3a4ba2dba6
DOC: ChangeLog - TODO top summary before final release
2013-10-31 01:11:42 +11:00
Daniel Black
c19a685ee3
DOC: version 0.8.11.pre
2013-10-31 00:58:48 +11:00
Daniel Black
8441539988
DOC: reorder bits of changelog
...
The enhancements list was too long an maybe not always appropriate.
Reclassified changes to filters to catch new versions as bug fixes
since the new version of the application is effectively broken.
Moved large enhancements to New Features.
2013-10-31 00:43:02 +11:00
Daniel Black
c3f9c9aa60
BF: filter.d/dropbear
...
Add PAM failures which is in dropbear-2013.60 in srv-authpam.c
Patch
http://www.unchartedbackwaters.co.uk/files/dropbear/dropbear-0.52.patch
obviously has exit with lower case e so adjust regex for both.
svr-authpasswd.c in 2013.60 (at bottom) for second regex ends after the
IP so the regex was altered.
.*\s* can be compressed to .*
2013-10-31 00:21:30 +11:00
Daniel Black
95f3f38682
MRG: merge ChangeLog and jail.conf
2013-10-30 20:19:41 +11:00
Daniel Black
c7b6d789ca
DOC: add ChangeLog for #392
2013-10-30 20:16:22 +11:00
Daniel Black
e3150044fd
BF: fix selinux
...
TST: ignore *common.conf files in test cases as these are included
BF: Remove USER_LOGIN from selinux-ssh as its a duplicate message
ENH: add sample jail.conf
2013-10-30 20:05:49 +11:00
Daniel Black
d451c2a231
FIX: vsftp improvements from Rich Mellor on mailing list
2013-10-26 09:51:25 +11:00
Daniel Black
88d8111db1
DOC: changelog for selinux-ssh too
2013-10-22 23:18:10 +11:00
Daniel Black
b61fe0f12d
Merge pull request #378 from grooverdan/sasl
...
ENH: filter.d/postfix-sasl - anchor regex at start and rename from filter.d/sasl
2013-10-22 04:51:24 -07:00
Daniel Black
4ecc063bd0
ENH: rename filter.d/sasl -> filter.d/postfix-sasl
2013-10-22 22:40:29 +11:00
Daniel Black
9ca5db7059
DOC: firewalld distro agnostic
2013-10-15 06:51:51 +11:00
Daniel Black
0d8d1ae26c
ENH: new action.d/firewall-cmd-direct-new.conf from Redhat Bugzilla #979622
2013-10-14 22:36:01 +11:00
Daniel Black
123ad1cc9c
MRG: Merge branch 'asterisk-common-jail'
2013-10-14 22:29:56 +11:00
Daniel Black
6ef33981e3
ENH: new asterisk jail to replace asterisk-(tcp|udp) (now that gh-37 is fixed)
2013-10-10 09:41:05 +11:00
Daniel Black
351eb5ec8f
ENH: filter.d/qmail - anchor at start. Add another regex for http://www.tjsi.com/rblsmtpd/faq/ patch to rblsmtpd
2013-10-09 16:44:48 +11:00
Daniel Black
2d1bd54439
Merge pull request #379 from grooverdan/webmin
...
ENH: filter.d/webmin anchor at start and use syslog
2013-10-08 20:13:14 -07:00
Yaroslav Halchenko
500968874e
Merge pull request #381 from grooverdan/suhosin
...
ENH: filter.d/suhosin - anchor regex at start
2013-10-08 19:49:51 -07:00
Yaroslav Halchenko
a7b1b802e0
Merge pull request #382 from grooverdan/vsftpd
...
Vsftpd
2013-10-08 19:47:38 -07:00
Daniel Black
46386412a4
ENH: filter.d/vsftpd - pam regex as syslog and anchored at start
2013-10-05 20:02:40 +10:00
Daniel Black
9637c27873
ENH: filter.d/suhosin - anchor regex at start
2013-10-05 19:39:39 +10:00
Daniel Black
13bcc9aa84
ENH: filter.d/sogo-auth - anchor regex at start
2013-10-05 19:27:07 +10:00
Daniel Black
b64bf3fa7b
ENH: filter.d/webmin anchor at start and use syslog
2013-10-05 19:18:44 +10:00
Daniel Black
f4c7c8f4b3
ENH: sasl - anchor regex at start
2013-10-05 18:59:41 +10:00
Daniel Black
c1d1c181ce
DOC: document time detector changes more thoroughly
2013-10-02 12:27:54 +10:00
Daniel Black
dd10eaa5c0
DOC: improve ChangeLog entry
2013-10-02 12:19:41 +10:00
Daniel Black
caf284d518
DOC: ChangeLog deconflict
2013-10-02 09:11:15 +10:00
Daniel Black
ba8183b116
Merge pull request #372 from grooverdan/uw-imap
...
ENH: filter.d/uwimap-auth added. Closes #18
2013-10-01 15:13:11 -07:00
Daniel Black
a1eaa5f755
ENH: filter.d/selinxu added. Closes #296
2013-10-01 09:59:15 +10:00
Daniel Black
778f09debe
DOC/ENH: __md5hex regex defination to common.conf. Document debian bug #
2013-10-01 09:03:33 +10:00
Daniel Black
b3b62d65bf
ENH: filter.d/uwimap-auth added. Closes #18
2013-09-29 18:06:27 +10:00
Daniel Black
2ad26682a9
DOC: ChangeLog for filter.d/sshd
2013-09-29 17:31:49 +10:00
Daniel Black
e12d389c65
MRG/DOC: jail.conf resolution, ChangeLog fixes
2013-09-29 08:21:13 +10:00
Mark McKinstry
ea112b450b
add ChangeLog and THANKS entry
2013-09-25 18:04:05 -04:00
Daniel Black
4b5ecbccd1
ENH: debuggex URLs with fail2ban-regex
2013-09-22 13:20:17 +10:00
Daniel Black
9805d39b60
MRG: merge date changes to support timezones
2013-09-20 18:22:32 +10:00
Daniel Black
8c2a5612ed
DOC: resolve ChangeLog conflicts
2013-09-19 19:38:28 +10:00
Daniel Black
2a805452c6
DOC: resolve ChangeLog conflicts
2013-09-19 19:28:39 +10:00
Daniel Black
3be7dcd701
DOC: resolve ChangeLog conflicts
2013-09-19 19:23:02 +10:00
Yaroslav Halchenko
596abde712
Merge pull request #352 from grooverdan/recidive
...
ENH: filter.d/recidive - anchor regex at start and support f2b SYSLOG target
2013-09-16 19:51:42 -07:00
Daniel Black
30bb1a77a3
ENH: added syslog prefix to pam-generic filter. Disable regex match for pre 2006 (< 0.99.2.0) versions on linux-pam
2013-09-17 10:50:46 +10:00
Daniel Black
ee497ff1cb
ENH: filter mysqld-auth can be a is a syslog based service so anchor it using syslog prefix
2013-09-17 07:57:19 +10:00
Daniel Black
13ec9d58c0
ENH: filter gssftpd is a syslog based service so anchor it using syslog prefix
2013-09-17 07:25:23 +10:00
Yaroslav Halchenko
bb32295b50
DOC: minor - untabified few entries in the ChangeLog
2013-09-16 09:49:24 -04:00
Yaroslav Halchenko
38b07ca46e
BF: catch and report exceptions while executing commands in client interactive mode ( Close #353 )
2013-09-15 23:05:32 -04:00