Commit Graph

5953 Commits (ab9d41e5309b417a3c7a84fa8f03cf4f93831f1b)
 

Author SHA1 Message Date
sebres 582436aadf don't add subnets to local addresses of `ignoreself` from network interfaces, use only IPs instead (subnets may be too heavy and not wanted, todo: make it configurable later)
2 years ago
sebres cb8674e68a amend with few improvements, IPv6IsAllowed prefers IPs from network interfaces (if available for platform) and uses DNS (socket.getaddrinfo) as a fallback only
2 years ago
sebres 09c23fd5b8 try to obtain local addresses from network interfaces before DNS to IP lookup (closes gh-3132);
2 years ago
sebres d8a9812adc improve auto detection of IPv6 - try to check sysctl net.ipv6.conf.all.disable_ipv6 (prefer value read from `/proc/sys/net/ipv6/conf/all/disable_ipv6`)
2 years ago
sebres 58834b6734 better auto-detection for IPv6 support (`allowipv6 = auto` by default); circumvent SF in some python's socket module by getaddrinfo with disabled IPv6 (closes gh-3438)
2 years ago
Sergey G. Brester 432e7e1e93
no warning if no config value but default (debug message now)
2 years ago
Sergey G. Brester bd6e7aeff0
Merge pull request #2112 from al42and/dante
2 years ago
Sergey G. Brester efbbcb41ea
non capturing group
2 years ago
Sergey G. Brester 996553f330
review, simplify regex and capture user name
2 years ago
Andrey Alekseenko df91b047d2 Dante SOCKS server: handle "1 byte/second" case
2 years ago
Andrey Alekseenko 05c162ef10 Create filter for Dante SOCKS server
2 years ago
Sergey G. Brester ae5fe2e003
amend to #3405, eliminate catch-all
2 years ago
sebres 36af3f2502 Merge branch 'gh-3405'
2 years ago
sebres a58fcb8786 fix cut out of match for pattern with `{EPOCH}` (similar to other datepatterns group capturing whole regex only added if no groups specified at all);
2 years ago
sebres cbb097a2b3 small amend (non capturing group)
2 years ago
sebres 82506f0586 filter.d/selinux-ssh.conf, filter.d/selinux-common.conf: fixes #3405 (new format with GS and additional parameters, e. g. grantors)
2 years ago
sebres eba33d6205 version bump
2 years ago
sebres e1d3006b03 update 1.0.2 -- finally-war-game-test-tape-not-a-nuclear-alarm
2 years ago
sebres fd3805b40a changelog: backend `systemd`: code review and several fixes
2 years ago
sebres cd17906afe Merge branch '0.11'
2 years ago
sebres d8e2b03a24 `filter.d/named-refused.conf` extended (closes gh-3388):
2 years ago
sebres 6d19d2e800 Merge branch '0.10' into 0.11
2 years ago
sebres 04c252c34b filtersystemd: code review, wait only if it is necessary - in operational mode and if no more entries retrieved (end of journal);
2 years ago
sebres ca2b94c522 fixes gh-3370: resolve extremely long search by repeated apply of non-greedy RE `(?:: (?:[^\(]+|\w+\([^\)]*\))+)?` with following branches (it may be extremely slow up to infinite search depending on message); added new regression tests
2 years ago
sebres fc7dbcc6a7 test-suite: avoid mistaken match that confuses output with working on line message by deep debugging of test (e. g. with `-l 4`)
2 years ago
sebres f8fcaf943b version bump
2 years ago
sebres 677da51562 release 1.0.1 -- energy-equals-mass-times-the-speed-of-light-squared
2 years ago
sebres bd94b7a47d make up leeway of ChangeLog (prepare release of 1.0)
2 years ago
sebres 2df58c5281 close fork
2 years ago
sebres 7bd4f41171 Merge branch '0.11'
2 years ago
sebres 94dac78afe Merge branch '0.10' into 0.11
2 years ago
sebres 485c50228a explicitly close cursor if not needed anymore (GC can grab it late)
2 years ago
sebres 45ef36276f fixes gh-3352: failed update of database didn't signal with an error
2 years ago
Jeff Johnson f9f78ed9d2
IPThreat integration (#3349)
2 years ago
sebres 934e1b606d Merge branch '0.11'
2 years ago
sebres 8dccf099e4 Merge branch '0.10' into 0.11
2 years ago
sebres 5e74499ffd provides details of failed regex compilation in the error message we throw in Regex-constructor (it's good to know what exactly is wrong)
2 years ago
sebres d6896eb26d New logtarget: systemd-journal;
2 years ago
sebres a08b925468 Merge branch '0.11'
2 years ago
sebres 467024797f Merge branch '0.10' into 0.11
2 years ago
sebres 35eb9acaee Merge branch 'test-gh-3334' into 0.10 - speedup daemonization process by huge open files limit
2 years ago
sebres 476136281c Revert "check large nofile limit issue (#3334)" (back to original open files limit)
2 years ago
sebres 38026e5963 code review (replace deprecated setter, since python 3.10)
2 years ago
sebres 535a982dcc fixes #3334: speedup daemonization process by huge open files limit (try to close open file descriptors obtained from `/proc/self/fd` or `/proc/fd`)
2 years ago
Sergey G. Brester 24b1dea197 check large nofile limit issue (#3334)
2 years ago
Sergey G. Brester 92d5455bdd
Merge pull request #3330 from tomers/reverse-in-a-single-line
2 years ago
Sergey G. Brester aceae84be2
no extra var needed for iterator
2 years ago
Sergey G. Brester e289a1155e
Merge pull request #3269 from Logic-32/feature/cloudflare-token
2 years ago
Tomer Shalev 0c3951b864 reverse in a single line
2 years ago
Sergey G. Brester bcac47d549
Merge pull request #3324 from fail2ban/patch-sendmail-no-user-part
2 years ago