1071 Commits (b47ea7f81334d8bb03f234653b446bbfe256a859)

 

All Branches   

Search

Author	SHA1	Message	Date
Yaroslav Halchenko	cc5d410004	Merge pull request #77 from sciunto/lightty ... Lighttpd: support auth.backend = "htdigest"	12 years ago
François Boulogne	958a1b0a40	Lighttpd: support auth.backend = "htdigest"	12 years ago
Yaroslav Halchenko	2a225aa6ee	Added a warning within "complaint.conf" action about care with enabling it	12 years ago
Yaroslav Halchenko	2d66f31ef5	ENH: instead of "Invalid command" warning log exception why command failed	13 years ago
Yaroslav Halchenko	0b5c66fb59	Changelog for the fix -- will rerelease 0.8.7.1	13 years ago
Yaroslav Halchenko	6b7544a63a	BF: removed sneaked a commented out sys.path.insert	13 years ago
Yaroslav Halchenko	c06c504a8e	Adjusted changelog to reflect the last change	13 years ago
Yaroslav Halchenko	2082fee7b1	ENH: match possibly present "pam_unix(sshd:auth):" portion for sshd (Closes: #648020)	13 years ago
Yaroslav Halchenko	2b885e07f4	Adjusted changelog to reflect the last change	13 years ago
Yaroslav Halchenko	6ad55f64b3	ENH: add wu-ftpd failregex for use against syslog (Closes: #514239)	13 years ago
Yaroslav Halchenko	a512ea47d2	Adjusted changelog to reflect the last change	13 years ago
Yaroslav Halchenko	80b191c7fd	BF: anchor chain name in actioncheck's for iptables actions (Closes: #672228)	13 years ago
Yaroslav Halchenko	a3b242d6dd	BF: inline comments must use ; not # -- recidive jail	13 years ago
Yaroslav Halchenko	99c0caa9cc	Boosted version to 0.8.7 + few more comments	13 years ago
Yaroslav Halchenko	da752aff14	perspective changelog for 0.8.7 ... Conflicts: ChangeLog	13 years ago
Yaroslav Halchenko	6495942550	DOC: minor (untabify, utf8) for ChangeLog	13 years ago
Yaroslav Halchenko	dca5634717	Merge branch '_enh/test_backends' -- fixing inotify backend, RF backends, unittests ... * _enh/test_backends: RF: reordered tests + enabled gamin now that its fix is pending in Debian ENH+BF: filtergamin -- to be more inline with current design of filterinotify ENH: 1 more sleep_4_poll to guarantee difference in time stamp ENH: few more delays for cases relying on time stamps ENH: tests much more robust now across pythons 2.4 -- 2.7 BF+RF: pyinotify refreshes watcher upon CREATE, unified/simplified *(add|del)LogPath among *Filters ENH: fail2ban-testcases -- custom logging format to ease debugging, non-0 exit code in case of failure ENH: Filter's testcases -- rename, del + list again --- a bit unstable, might still fail from time to time BF: pyinotify -- monitor the parent directory for IN_CREATE + process freshly added file (Closes gh-44) ENH: first working unittest for checking polling and inotify backends RF/BF: just use pyinotify.ThreadedNotifier thread in filterpyinotify RF: filter.py -- single readline in a loop ENH: FilterPoll -- adjusted some msgs + allowed to operate without jail (for testing) Minor additional comment to DEVELOP ENH: extended test LogfileMonitor	13 years ago
Yaroslav Halchenko	481b1530d6	RF: reordered tests + enabled gamin now that its fix is pending in Debian ... reference: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=542361	13 years ago
Yaroslav Halchenko	c6f5d854d3	ENH+BF: filtergamin -- to be more inline with current design of filterinotify	13 years ago
Yaroslav Halchenko	337f3f6f7b	ENH: 1 more sleep_4_poll to guarantee difference in time stamp	13 years ago
Yaroslav Halchenko	e9964846fa	ENH: few more delays for cases relying on time stamps	13 years ago
Yaroslav Halchenko	c0c1232c5f	Merge branch 'master' into _enh/test_backends ... * master: Ask users to report bugs to github's issues Replace "|" with "_" in ipmasq-ZZZzzz|fail2ban.rul (Closes gh-66)	13 years ago
Yaroslav Halchenko	a1a67d34a9	ENH: tests much more robust now across pythons 2.4 -- 2.7 ... * needed additional sleeps for polling filter since that one relies on time-stamps and too rapid changes would not be caught by the PollFilter * in python 2.4, time stamps are up to a second (int's) so sleeps longer * test_new_bogus_file -- just to make sure that addition of new files does not alter our monitoring	13 years ago
Yaroslav Halchenko	d9248a6cf8	BF+RF: pyinotify refreshes watcher upon CREATE, unified/simplified *(add|del)LogPath among *Filters ... * all of the *Filters had too much of common logic in their *LogPath methods, which is now handled by FileFilter and derived classes only add custom actions in corresponding _(add|del)LogPath methods pyinotify: * upon CREATE event: - unknown files should not be handled at all - "watcher" for the monitored files should be recreated. Lead to adding _(add|del)FileWatcher helper methods * callback now obtains full event to judge what to do	13 years ago
Yaroslav Halchenko	b33ae8c194	Ask users to report bugs to github's issues	13 years ago
Yaroslav Halchenko	08564bda1a	ENH: fail2ban-testcases -- custom logging format to ease debugging, non-0 exit code in case of failure	13 years ago
Yaroslav Halchenko	6ac9fd5d26	ENH: Filter's testcases -- rename, del + list again --- a bit unstable, might still fail from time to time	13 years ago
Yaroslav Halchenko	3c95121a8b	BF: pyinotify -- monitor the parent directory for IN_CREATE + process freshly added file (Closes gh-44)	13 years ago
Yaroslav Halchenko	60260bce3d	ENH: first working unittest for checking polling and inotify backends	13 years ago
Yaroslav Halchenko	baa09098f0	RF/BF: just use pyinotify.ThreadedNotifier thread in filterpyinotify ... that seems also to overcome the problem of often locking upon stop()	13 years ago
Yaroslav Halchenko	25674a95f8	RF: filter.py -- single readline in a loop	13 years ago
Yaroslav Halchenko	b3614d4ea2	ENH: FilterPoll -- adjusted some msgs + allowed to operate without jail (for testing)	13 years ago
Yaroslav Halchenko	42523dce92	Minor additional comment to DEVELOP	13 years ago
Yaroslav Halchenko	47e956bc8e	Replace "|" with "_" in ipmasq-ZZZzzz|fail2ban.rul (Closes gh-66) ... Surprise -- that is for Windows compatibility	13 years ago
Yaroslav Halchenko	0b842272e3	ENH: extended test LogfileMonitor	13 years ago
Alan Jenkins	8c38907016	Misconfigured DNS should not ban *successful* ssh logins ... Noticed while looking at the source (to see the point of ssh-ddos). POSSIBLE BREAK-IN ATTEMPT - sounds scary? But keep reading the message. It's not a login failure. It's a warning about reverse-DNS. The login can still succeed, and if it _does_ fail, that will be logged as normal. <exhibit n="1"> Jul 9 05:43:00 brick sshd[18971]: Address 200.41.233.234 maps to host234.advance.com. ar, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Jul 9 05:43:00 brick sshd[18971]: Invalid user html from 200.41.233.234 </exhibit> The problem (in my mind) is that some users are stuck with bad dns. The warning won't stop them from logging in. I'm pretty sure they can't even see it. But when they exceed a threshold number of logins - which could be all successful logins - fail2ban will trigger. fail2ban shouldn't adding additional checks to successful logins - it goes against the name fail2ban :) - the first X "POSSIBLE BREAK-IN ATTEMPT"s would be permitted anyway - if you want to ban bad DNS, the right way is PARANOID in /etc/hosts.deny I've checked the source of OpenSSH, and this will only affect the reverse-DNS error. (I won't be offended if you want to check for yourself though ;) <exhibit n="2"> $ grep -r -h -C1 'ATTEMPT' openssh-5.5p1/ logit("reverse mapping checking getaddrinfo for %.700s " "[%s] failed - POSSIBLE BREAK-IN ATTEMPT!", name, ntop); return xstrdup(ntop); -- logit("Address %.100s maps to %.600s, but this does not " "map back to the address - POSSIBLE BREAK-IN ATTEMPT!", ntop, name); $ </exhibit>	13 years ago
Yaroslav Halchenko	9a2b41f6ad	ENH: add more verbosity levels to be controlled while running unittests	13 years ago
Yaroslav Halchenko	398cc73d3d	Added few tests of FileFilter. yet to place them into a Jail-ed execution test ... At the moment they are, despite being provided different backends, pretty much test FileFilter functionality.	13 years ago
Yaroslav Halchenko	bbab49a415	DOC: distilling some of server "design" into DEVELOP notes for common good	13 years ago
Yaroslav Halchenko	9b360bb12d	ENH: minor, just trailing spaces/tabs + reformated a string	13 years ago
Yaroslav Halchenko	215c3cc5c5	ENH: added a basic test for FilterPoll for detection of modifications ... The test class MonitorFailures is intended to be excercised for all Filter*'s, i.e. backends. It is just atm it is useful only for Poll	13 years ago
Yaroslav Halchenko	f970bb288a	Merge pull request #59 from yakatz/doc/DEVELOP ... clarified that the are existing test cases and the 'coming soon' is about creating new ones	13 years ago
Yehuda Katz	bd40cc7c31	clarified that the are existing test cases and the 'coming soon' is about creating new ones.	13 years ago
Yaroslav Halchenko	25b629a75b	Merge pull request #58 from yakatz/doc/DEVELOP ... Added beginnings of documentation for developers	13 years ago
Yehuda Katz	322f53e26d	Added beginnings of documentation for developers	13 years ago
Yaroslav Halchenko	3989d24967	BF: usedns=no was not working at all ... it was not adding any detected address, IP or not to the list of failed attempts This commit also adds appropriate unittest	13 years ago
Yaroslav Halchenko	971406f722	RF: filtertestcase.py to put common testing into a helping subroutine	13 years ago
Yaroslav Halchenko	d0a322f2b8	ENH: be able to control verbosity from cmdline for fail2ban-testcases	13 years ago
Yaroslav Halchenko	b4099dae57	DOC: Adjusted header for config/*.conf to mention .local and way to comment ... thanks to Stefano Forli for reminding about comments see Debian Bug#676146	13 years ago
Yaroslav Halchenko	958aa2e932	Merge pull request #50 from mellitus/master ... Fix addBannedIP/banip command (Closes gh-31)	13 years ago