Yaroslav Halchenko
baf8cc7eb5
adding misc:Depends as advised by lintian
2010-06-28 22:13:27 -04:00
Yaroslav Halchenko
ecb29697e2
Adding news about named-refused-udp
2010-06-28 22:13:15 -04:00
Yaroslav Halchenko
52f37cc159
thanks lintian -- tuning up version for elderly NEWS entry
2010-06-28 22:10:22 -04:00
Yaroslav Halchenko
f7bb5e2df4
changelog entry for 0.8.4-3
2010-06-28 21:50:37 -04:00
Yaroslav Halchenko
20c0d92e89
Merge branch 'debian' into debian-release
...
* debian:
Replacing word of caution with big fat warning and commenting out named-refused-udp completely (Closes : #583364 )
Adding arno-iptables-firewall (no deprecation of ipmasq per Joey Hess mentioning, which still could be used on lenny systems)
2010-06-28 21:45:56 -04:00
Yaroslav Halchenko
833f60a38a
Replacing word of caution with big fat warning and commenting out named-refused-udp completely ( Closes : #583364 )
2010-06-28 21:45:47 -04:00
Yaroslav Halchenko
d1b9e71173
Adding arno-iptables-firewall (no deprecation of ipmasq per Joey Hess mentioning, which still could be used on lenny systems)
2010-05-26 17:58:20 -04:00
Yaroslav Halchenko
eb08f17cb2
changelog entry for -2
2010-02-25 00:20:08 -05:00
Yaroslav Halchenko
26c3416793
Merge branch 'debian' into debian-release
...
* debian:
BF: --install-layout=deb for setup.py + python (>= 2.5.4-1~) to fix install with python2.6 (closes : #571213 )
2010-02-25 00:16:59 -05:00
Yaroslav Halchenko
3f898d7c05
BF: --install-layout=deb for setup.py + python (>= 2.5.4-1~) to fix install with python2.6 ( closes : #571213 )
2010-02-25 00:03:22 -05:00
Yaroslav Halchenko
d0f32768d6
releasing 0.8.4-1 into Debian
2009-09-11 01:49:04 -04:00
Yaroslav Halchenko
187d6c96a9
changelog entry
2009-09-11 00:53:53 -04:00
Yaroslav Halchenko
3b7e6b6cbc
Merge branches 'debian' and 'up/log_examples' into build
...
* debian:
actually boosting policy
BF: use "set logtartet" instead of "reload" while logrotate. Thanks J.M.Roth (Closes : #537773 )
BF: adjusted README.Debian - multiport is default (closes : #545971 )
* up/log_examples:
added proftpd examples from wiki
NF: few examples for pure-ftpd
2009-09-10 18:03:32 -04:00
Yaroslav Halchenko
efb1f57f62
actually boosting policy
2009-09-10 11:22:48 -04:00
Yaroslav Halchenko
472a7b31ce
BF: use "set logtartet" instead of "reload" while logrotate. Thanks J.M.Roth ( Closes : #537773 )
2009-09-10 11:05:56 -04:00
Yaroslav Halchenko
3dd16eeddf
BF: adjusted README.Debian - multiport is default ( closes : #545971 )
2009-09-10 09:09:01 -04:00
Yaroslav Halchenko
779d377ac5
Merge branch 'debian' into build
...
* debian:
actually removing fail2ban installed /var/run/fail2ban while building package
2009-07-09 01:48:49 -04:00
Yaroslav Halchenko
d2695899a0
actually removing fail2ban installed /var/run/fail2ban while building package
2009-07-09 01:48:43 -04:00
Yaroslav Halchenko
f6861cd5ee
Changelog entries
2009-07-09 01:42:48 -04:00
Yaroslav Halchenko
fee38e2fc0
Merge branch 'debian' into build
...
* debian:
BF: thanks lintian -- removing stale /var/run/fail2ban from dirs -- should be created by init script
Thanks lintian for catching a misspell in README.Debian
boosted debhelper compatibility to 5
2009-07-09 01:38:05 -04:00
Yaroslav Halchenko
01a5faf131
BF: thanks lintian -- removing stale /var/run/fail2ban from dirs -- should be created by init script
2009-07-09 01:37:58 -04:00
Yaroslav Halchenko
8de0f450e9
Thanks lintian for catching a misspell in README.Debian
2009-07-09 01:36:46 -04:00
Yaroslav Halchenko
53066981af
boosted debhelper compatibility to 5
2009-07-09 01:36:03 -04:00
Yaroslav Halchenko
59223c3513
Very lengthy debian/changelog entry
2009-07-09 01:15:47 -04:00
Yaroslav Halchenko
5f6a30fe9e
Merge branches 'up/fixes', 'up/log_examples', 'debian' and 'up/ipmasq' into build
...
* up/fixes:
Removed duplicate entry for DataCha0s/2\.0 in badbots (closes : #519557 )
BF: Allow for trailing spaces in proftpd logs (closes : #507986 )
* up/log_examples:
added sasl example log file
* debian:
Added a comment into Debian-shipped jail.conf about sasl logpath -- it might preferable to monitor warn.log in case of postfix
* up/ipmasq:
BF: removing minor bashism in ipmasq example file (closes : #530078 ). Thanks Raphael Geissert
2009-07-09 00:58:46 -04:00
Yaroslav Halchenko
6197fb178c
Added a comment into Debian-shipped jail.conf about sasl logpath -- it might preferable to monitor warn.log in case of postfix
2009-07-09 00:48:05 -04:00
Yaroslav Halchenko
3114418b1e
Merge branch 'debian' into build
...
* debian:
Boosted policy to 3.8.2 -- no changed are due
fixed Vcs-git field
2009-07-09 00:05:13 -04:00
Yaroslav Halchenko
034f07ada6
Boosted policy to 3.8.2 -- no changed are due
2009-07-09 00:05:03 -04:00
Yaroslav Halchenko
8d07aa603e
fixed Vcs-git field
2009-07-09 00:00:26 -04:00
Yaroslav Halchenko
d47bfd73d6
added changelog entry about BF
2009-02-05 09:54:22 -05:00
Yaroslav Halchenko
e5ca2a97b1
BF: added missing semicolon in a logging template for bind within jail.conf (thanks to anonymous on www.debian-administration.org)
2009-02-02 23:03:48 -05:00
Yaroslav Halchenko
84f3a0c413
Merge branch 'debian' into build
...
* debian:
BF: added missing semicolon in a logging template for bind within jail.conf
2009-02-02 23:02:35 -05:00
Yaroslav Halchenko
5fe12cc756
BF: added missing semicolon in a logging template for bind within jail.conf
2009-02-02 23:01:17 -05:00
Yaroslav Halchenko
65159d1498
updated changelog
2009-01-18 11:58:31 -05:00
Yaroslav Halchenko
17165182c9
Merge branch 'debian' into build
...
* debian:
adjusted description of bantime/findtime in README.Debian (closes : #507771 )
2009-01-18 11:57:12 -05:00
Yaroslav Halchenko
de98375553
adjusted description of bantime/findtime in README.Debian ( closes : #507771 )
2009-01-18 11:56:20 -05:00
Yaroslav Halchenko
463564d590
New changelog entry to describe the merge of upstream
...
* added example for BREAK-IN in ssh
* Syncing current debian revision to FAIL2BAN-0_8@717 of upstream,
since it includes fixes to some forwarded bugs. Total list of
functional changes
- Added actions to report abuse to ISP, DShield and myNetWatchman.
Thanks to Russell Odom.
- Added apache-nohome.conf. Thanks to Yaroslav Halchenko.
- Added new time format. No idea from where it comes...
- Added new regex. Thanks to Tobias Offermann.
- Try to match the regex even if the line does not contain a valid
date/time. Described in Debian #491253 . Thanks to Yaroslav
Halchenko.
- Removed "timeregex" and "timepattern" stuff that is not needed
anymore.
- Added date template for Day-Month-Year Hour:Minute:Second
(closes : #491253 )
- Added date pattern for Hour:Minute:Second. Thanks to Andreas
Itzchak Rehberg.
- Use current day and month instead of Jan 1st if both are not
available in the log. Thanks to Andreas Itzchak Rehberg.
- Improved pattern. Thanks to Yaroslav Halchenko.
- Merged patches from Debian package. Thanks to Yaroslav Halchenko.
2009-01-18 11:42:13 -05:00
Yaroslav Halchenko
196d4c31d8
BF: addressing added bang to ssh log ( closes : #512193 ). Thanks Silvestre Zabala.
2009-01-18 10:41:13 -05:00
Yaroslav Halchenko
f868269362
releasing 0.8.3-2
2008-08-06 15:49:34 -04:00
Yaroslav Halchenko
3f577f7fbf
BF in apache-noscript.conf - regexp matched in referer ( Closes : #492319 ). Thanks Bernd Zeimetz.
2008-07-25 13:35:19 -04:00
Yaroslav Halchenko
79442fcc7b
adjusted changelog due to merges
2008-07-21 10:40:22 -04:00
Yaroslav Halchenko
8cd185ebbb
adjusted changelog for 0.8.3-1
2008-07-21 10:29:24 -04:00
Yaroslav Halchenko
122ef9f306
Merge branch 'debian' into build
...
* debian:
Boosted policy compliance to 3.8.0 (no changes needed)
2008-07-21 10:25:51 -04:00
Yaroslav Halchenko
8ab68346b1
Boosted policy compliance to 3.8.0 (no changes needed)
2008-07-21 10:25:32 -04:00
Yaroslav Halchenko
bf9e991b4a
Merge branch 'debian' into build
...
* debian: (23 commits)
Imported Upstream version 0.8.3
- Prepared for 0.8.3.
Adjusted vcs paths
- Prepared for 0.8.3
- Send file if the number of lines is greater or equal and not only equal to the limit.
- Use poll instead of select in asyncore.loop. This should solve the "Unknown error 514". Thanks to Michael Geiger and Klaus Lehmann.
- Added missing ignoreregex to filters. Thanks to Klaus Lehmann.
- Added and changed some logging level and messages.
- Added svn:keywords.
- Added ISO 8601 date/time format.
- Better (correct) fix for ignoreregex in jail.[conf|local].
- Fixed ignoreregex processing in fail2ban-client. Thanks to René Berber.
- Added "Day/Month/Year Hour:Minute:Second" date template. Thanks to Dennis Winter.
- Added svn:keywords.
- Added gssftpd filter. Thanks to Kevin Zembower.
- Changed some log level.
- Fixed "fail2ban-client get <jail> logpath". Bug #1916986 .
- Fixed PID file while started in daemon mode. Thanks to Christian Jobic who submitted a similar patch.
- Fixed socket path in redhat and suse init script. Thanks to Jim Wight.
- Create /var/run/fail2ban during install.
...
Conflicts:
ChangeLog
config/filter.d/gssftpd.conf
config/filter.d/pam-generic.conf
debian/changelog
2008-07-21 10:22:06 -04:00
Yaroslav Halchenko
a779bfc655
Adjusted vcs paths
2008-07-17 11:21:51 -04:00
Yaroslav Halchenko
a355adcbb2
Changelog entries for 0.8.2-3
2008-05-06 11:10:39 -04:00
Yaroslav Halchenko
db62370cea
Merge branch 'debian' into build
...
* debian:
BF: Assure that /var/run/fail2ban exists upon start (LP: #222804 , #223706 )
2008-05-06 10:45:11 -04:00
Yaroslav Halchenko
32281ed1aa
BF: Assure that /var/run/fail2ban exists upon start (LP: #222804 , #223706 )
2008-05-06 10:43:57 -04:00
Yaroslav Halchenko
9db84ab727
releasing 0.8.2-2
2008-04-07 10:27:03 -04:00
Yaroslav Halchenko
154c46cdac
Merge branch 'debian' into build
...
* debian:
BF: Recommends whois, which is used in some actions (LP: #213227 )
2008-04-07 10:25:37 -04:00
Yaroslav Halchenko
8207f166e1
BF: Recommends whois, which is used in some actions (LP: #213227 )
2008-04-07 10:24:09 -04:00
Yaroslav Halchenko
66c0610809
Merge branch 'debian' into build
...
* debian:
added dirs file to create /var/run/fail2ban
2008-03-05 23:54:56 -05:00
Yaroslav Halchenko
ef9148cff4
added dirs file to create /var/run/fail2ban
2008-03-05 23:54:30 -05:00
Yaroslav Halchenko
db3567e37f
Merge branch 'debian' into build
...
* debian:
CHANGELOG -> ChangeLog in rules
2008-03-05 23:32:54 -05:00
Yaroslav Halchenko
36f90e4622
CHANGELOG -> ChangeLog in rules
2008-03-05 23:32:42 -05:00
Yaroslav Halchenko
9122f3aab0
Releasing 0.8.2-1
2008-03-05 23:31:20 -05:00
Yaroslav Halchenko
21a7928c64
Merge branch 'debian' into build
...
* debian:
2 new jails: xinetd-fail, apache-overflows added to jails.conf
minor: adjusted comment for named jails to come closer to upstream
BF: apache-* jails -- authentication failures are recorded in *error.log files, thus paths were adjusted
2008-03-05 23:30:41 -05:00
Yaroslav Halchenko
eede41f62b
Changelog entries for 0.8.2-1
2008-03-05 23:30:31 -05:00
Yaroslav Halchenko
a88fd271c4
2 new jails: xinetd-fail, apache-overflows added to jails.conf
2008-03-05 23:29:36 -05:00
Yaroslav Halchenko
5d6d07508d
minor: adjusted comment for named jails to come closer to upstream
2008-03-05 23:18:04 -05:00
Yaroslav Halchenko
15ce210cd0
BF: apache-* jails -- authentication failures are recorded in *error.log files, thus paths were adjusted
2008-03-05 23:14:22 -05:00
Yaroslav Halchenko
9ab6db30c7
Merge branch 'debian' into build
...
* debian: (56 commits)
Imported upstream version 0.8.2
debian/watch: switched to git-import-orig
- Tag for 0.8.2
- Updated for 0.8.2
- Updated e-mail
- Changed homepage and e-mail
- Updated copyright.
- readline is now optional in fail2ban-client (not needed in fail2ban-server).
- Added svn:keywords
- Fixed Debian bug #461426
- Fixed Debian bug #462060
- Fixed Debian bug #468477
- Fixed Debian bug #456567
- Added revision.
- Added "reload <JAIL>"
- Replaced "reject" with "drop" in shorwall action. Fix #1854875
- Replaced "echo" with "printf" in actions. Fix #1839673
- Catch Exception instead of AttributeError.
- Absorbed some Debian patches. Thanks to Yaroslav Halchenko.
- Updated.
...
Conflicts:
config/fail2ban.conf
config/filter.d/proftpd.conf
config/filter.d/sshd.conf
man/fail2ban-client.1
man/fail2ban-server.1
server/datestrptime.py
server/server.py
2008-03-05 22:30:10 -05:00
Yaroslav Halchenko
940d7fa430
debian/watch: switched to git-import-orig
2008-03-05 20:18:50 -05:00
Yaroslav Halchenko
e43ea8e1b3
releasing -5
2008-02-28 19:52:37 -05:00
Yaroslav Halchenko
0392274daf
added 0.8.1-4 changelog entry.
2008-02-09 22:09:50 -05:00
Yaroslav Halchenko
b8d97d0983
Merge branches 'debian', 'deb/specifics', 'up/0.9-0.8', 'up/apache_noscript_extend', 'up/ipmasq', 'up/log_examples', 'up/mail_whois_lines', 'up/named_refused_fixed', 'up/pam_generic', 'up/proftpd_fix+extend', 'up/sshd_refused_connect' and 'up/vsftpd_optional_user' into build
...
* debian:
Confirms to policy 3.7.3 (no changes)
Bye Bye dpatch: now everything is handled in git branches
removing patches from dpatch system since they are in branches now
added a comment to README.Debian and to the list of examples for ipmasq example file
Fixed == bashism (Closes : #464647 ). Thanks Raphael Geisser
* deb/specifics:
slight tune ups in upstream sources destined only for debian are kept in this branch
* up/0.9-0.8:
* up/apache_noscript_extend:
Extended apache-noscript filter with more file extensions and to react to "script not found or unable to stat" log message (closes : #456565 ). Thanks Tim Connors
* up/ipmasq:
Added ipmasq rule file to restart fail2ban when iptables are wiped out (closes : #461417 ). Thanks Guido Bozzetto
* up/log_examples:
up/log_examples: moved vsftpd log from up/vsftpd_optional_user
added examples of log lines (for named-refused, pam-generic, sshd) under files/logs for easy testing
* up/mail_whois_lines:
mail-whois-lines: moved fix for proper names from dpatch
* up/named_refused_fixed:
named_refused: moved fix for proper config+filters from dpatch
* up/pam_generic:
added pam-generic from dpatch
* up/proftpd_fix+extend:
Fix/extension of proftpd failrexes (Closes : #461412 ). Thanks Guido Bozzetto
* up/sshd_refused_connect:
* up/vsftpd_optional_user:
up/vsftpd_optional_user: moving examples into up/examples branch
BF: vsftp anchoring
2008-02-09 22:02:21 -05:00
Yaroslav Halchenko
fc3a57b6c1
Confirms to policy 3.7.3 (no changes)
2008-02-08 01:23:34 -05:00
Yaroslav Halchenko
4b2bd7e776
Bye Bye dpatch: now everything is handled in git branches
2008-02-08 00:52:04 -05:00
Yaroslav Halchenko
a832ede291
removing patches from dpatch system since they are in branches now
2008-02-08 00:46:00 -05:00
Yaroslav Halchenko
996da9a3f0
added a comment to README.Debian and to the list of examples for ipmasq example file
2008-02-07 23:43:21 -05:00
Yaroslav Halchenko
0da36545d3
Fixed == bashism ( Closes : #464647 ). Thanks Raphael Geisser
2008-02-07 23:43:21 -05:00
Yaroslav Halchenko
24d8b44c2a
* Moved iptables into recommends since fail2ban can work without iptables
...
using some other action (e.g hosts.deny)
2007-11-23 12:50:39 -05:00
Yaroslav Halchenko
fa21222c63
* Moved iptables into recommends since fail2ban can work without iptables
...
using some other action (e.g hosts.deny)
2007-11-23 12:49:15 -05:00
Yaroslav Halchenko
ee25282f34
releasing 0.8.1-3
2007-11-23 11:43:41 -05:00
Yaroslav Halchenko
6b913aafa2
Merge branch 'debian' into build: Vcs fields
...
Conflicts:
debian/changelog
2007-11-23 11:10:35 -05:00
Yaroslav Halchenko
f8b17f3859
* Added Vcs- fields, moved Homepage into source header's field
2007-11-23 11:09:34 -05:00
Yaroslav Halchenko
4b95233acb
Merge branches 'debian' and 'up/sshd_refused_connect' into build: NF: refused connect sshd failregex
2007-11-23 09:02:58 -05:00
Yaroslav Halchenko
46cfc2bbd6
added example for "refused connect"
2007-11-23 09:00:08 -05:00
Yaroslav Halchenko
d82257b2f2
Merge branch 'debian' into build: BF: no sftp in ssh jails
2007-11-22 14:34:59 -05:00
Yaroslav Halchenko
1cedd8e02b
BF: removed sftp from ssh jails
2007-11-22 14:32:17 -05:00
Yaroslav Halchenko
4aa9bca7ca
Merge branch 'up/0.9-0.8' into build and provided debian/changelog
2007-11-11 01:21:44 -05:00
Yaroslav Halchenko
2553e2717a
* Added force-start action to init script, so it could be forced
...
to start if previous run crashed and left a socket file. Must to be
used with caution.
2007-10-18 22:03:37 -04:00
Yaroslav Halchenko
8d9aca4e20
* Fixed named-refused filter.
2007-10-16 17:02:35 -04:00
Yaroslav Halchenko
99dbe90ad2
releasing
2007-10-16 17:02:35 -04:00
Yaroslav Halchenko
413ec5317e
first pre-release version of 0.8.1
2007-10-16 17:02:35 -04:00
Yaroslav Halchenko
0012f9ff92
* (NOT RELEASED YET) New upstream release.
...
Patches absorbed upstream:
00_daemon_pids.dpatch
00_iptables_allports.dpatch
00_vsftp_filter_spaces.dpatch
00_resolve_all_names.dpatch
00_HOST_ignoreregex.dpatch
Patches which needed some tune-up:
00_ssh_strong_re.dpatch
00_mail-whois-lines.dpatch
00_named_refused.dpatch
2007-10-16 17:02:35 -04:00
Yaroslav Halchenko
e10a8616b4
fetched fresh upstream 0.8.1
2007-10-16 17:02:35 -04:00
Yaroslav Halchenko
922b5035ea
actually we never released pre-release
2007-10-16 17:02:35 -04:00
Yaroslav Halchenko
85b75c77fb
* Resolve all "names" which became a part of <HOST>. Previousely only fqdn's
...
were resolved
2007-08-13 21:13:59 +00:00
Yaroslav Halchenko
c5202ce696
* Added optional spaces at the end of failregex for vsftpd.
2007-08-06 01:39:30 +00:00
Yaroslav Halchenko
58ae2a5a75
* Added new time template matching named log entries
2007-07-30 02:31:35 +00:00
Yaroslav Halchenko
95d17ee318
* Adjusted failregex for sshd filter:
...
- anchored properly at the end of line, and source code has .examples
files to perform testing of the rules.
- added new explicit rule for users not in the AllowUsers lists
2007-07-29 17:20:23 +00:00
Yaroslav Halchenko
3aef16b773
* jail.conf has specification of protocol (default to tcp) to be provided to
...
banaction
2007-07-25 03:47:32 +00:00
Yaroslav Halchenko
990bd15dd5
specified default protocol (tcp) and specified udp for jail for named
2007-07-25 03:46:41 +00:00
Yaroslav Halchenko
ac7e1696d4
fixed named filter to account for optional (cache)
2007-07-24 20:04:20 +00:00
Yaroslav Halchenko
14d3ffc6de
* Added a filter for named to catch refused/denied queries
2007-07-24 18:10:05 +00:00
Yaroslav Halchenko
2a3d710cad
adjusted pam_generic patch in example to catch ftp
2007-07-24 17:25:38 +00:00
Yaroslav Halchenko
d63bea24f5
tuned pam_generic to catch some weird log lines
2007-07-21 02:29:45 +00:00
Yaroslav Halchenko
a843d0da04
tuned pam_generic to catch some weird log lines
2007-07-21 02:27:30 +00:00
Yaroslav Halchenko
f58421eabf
* Use /var/run to keep socket file ( closes : #425746 )
2007-07-05 17:12:17 +00:00
Yaroslav Halchenko
a9ecd98ffe
Added port param in jail since otherwise -- crashes
2007-06-25 17:08:49 +00:00
Yaroslav Halchenko
2e55bc57c7
* Added a filter pam_generic to catch any login errors.
...
* Added iptables-allports.
2007-06-25 16:51:05 +00:00
Yaroslav Halchenko
bc0806d459
* Moved <HOST> expansion into regex.py ( closes : #429263 ). Thanks James
...
Andrewartha.
* Added optional regexp entry for process PID in some entries (closes:
#426050 ). Thanks Roderick Schertler.
2007-06-21 01:47:02 +00:00
Yaroslav Halchenko
cc5ec4dcde
releasing
2007-05-16 18:14:13 +00:00
Yaroslav Halchenko
e55dfeaf3a
untabified last entry
2007-05-15 14:37:09 +00:00
Yaroslav Halchenko
cc1ed23b40
* Applied changes submitted by Bernd Zeimetz (thanks Bernd):
...
- Removed obsolete Build-Depends-Indep on help2man, python-dev
- Explicit removal of *.pyc files compiled during build
- Invoke 'python setup.py clean' in clean target, which required also
to move python into Build-Depends
* Minor clean up of debian/rules
2007-05-15 14:26:28 +00:00
Yaroslav Halchenko
be824f4e00
adjusted to be prerelease of the package
2007-05-10 15:35:43 +00:00
Yaroslav Halchenko
c58a100259
* Manually changing the order of debhelper inserted scripts in prerm
...
(Closes : #422655 )
* Removed obsolete hack to have /bin/env invocation of python for
fail2ban-* scripts
2007-05-10 15:34:09 +00:00
Yaroslav Halchenko
e9397ea375
* New stable upstream release
2007-05-05 16:35:58 +00:00
Yaroslav Halchenko
10718c1036
initial upgrade to 0.8.0
2007-05-05 16:17:50 +00:00
Yaroslav Halchenko
d15f9d0206
* New upstream release
...
* Updated copyright to include current year
* Removed patches absorbed upstream
2007-04-20 01:44:43 +00:00
Yaroslav Halchenko
5dcec130f6
adjusted changelog -- releasing finally
2007-03-26 21:53:30 +00:00
Yaroslav Halchenko
7c30a3097b
* Applied post-release upstream changes to resolve issues with
...
- Close opened handlers to log file
- Fixed "reload" bug
2007-03-26 21:47:10 +00:00
Yaroslav Halchenko
dc21820c80
adjusted paths in patches
2007-03-24 22:40:42 +00:00
Yaroslav Halchenko
d345865621
* New upstream release
...
* Applied post-release changes to resolve issues with gamin and not closed
on reload log file
2007-03-24 22:27:09 +00:00
Yaroslav Halchenko
ee3f91176c
* New upstream release (included most of the debian-provided patches -- new
...
filters and actions)
* Refreshed and made verbatim homepage in description
2007-02-09 03:22:15 +00:00
Yaroslav Halchenko
a4c15ea883
* NOT RELEASED YET
...
* Made homepage in description verbatim
2007-02-07 15:25:11 +00:00
Yaroslav Halchenko
936fee7c40
* Use /usr/bin/python interpreter instead of wrapped call to python by
...
/usr/bin/env
2007-01-19 16:08:10 +00:00
Yaroslav Halchenko
30eb0566bd
making it using /usr/bin/python directly
2007-01-19 15:56:21 +00:00
Yaroslav Halchenko
f92e887994
minor more changes
2007-01-19 15:53:21 +00:00
Yaroslav Halchenko
878fa0dedd
* Synchronized action.d/iptables-* rules from upstream SVN (closes:
...
#407561 )
* Minor: options renames in the comments to be in sync with upstream
2007-01-19 15:51:11 +00:00
Yaroslav Halchenko
e3102eb28a
had to rename filter for courierauth
2007-01-18 15:52:48 +00:00
Yaroslav Halchenko
7a1dd9e98c
* iptables-multiport is default action to take since Debian kernel arrives
...
with multiport module. That is to address the fact that most services
listen on multiple port (for encrypted and non-encrypted connections)
* Added [courierauth] jail (First 2 items are to partially address #407404
2007-01-18 15:41:49 +00:00
Yaroslav Halchenko
85d8604209
removed empty lines
2007-01-04 20:34:41 +00:00
Yaroslav Halchenko
36b1833e31
* Adjusted default log file for postfix to be /var/log/mail.log
...
(Closes : #404921 )
2007-01-04 20:25:45 +00:00
Yaroslav Halchenko
acfebf3475
adjusted multiport section as promised in changelog
2007-01-04 20:19:58 +00:00
Yaroslav Halchenko
e570f14a5d
releasing
2007-01-04 19:48:58 +00:00
Yaroslav Halchenko
f01c74581d
fixed action_ shortcuts
...
adjusted initd script to be verbose on start if socketfile exists
2007-01-04 19:47:00 +00:00
Yaroslav Halchenko
7fa686a7f2
* New upstream release, which incorporates fixes introduced in 3~pre
...
non-released versions (which were suggested to the users to overcome
problems reported in bug reports). In particular attention should be paid
to upstream changelog entries
- Several "failregex" and "ignoreregex" are now accepted.
Creation of rules should be easier now.
This is an alternative solution to 'multiple <HOST>' entries fix,
which is not applied to this shipped version - pay cautios if upgrading
from 0.7.5-3~pre?
- Allow comma in action options. The value of the option must
be escaped with " or '.
That allowed to implement requested ability to ban multiple ports
at once (See 373592). README.Debian and jail.conf adjusted to reflect
possible use of iptables-mport
- Now Fail2ban goes in /usr/share/fail2ban instead of
/usr/lib/fail2ban. This is more compliant with FHS.
Patch 00_share_insteadof_lib no longer applied
* Refactored installed by debian package jail.conf:
- Added option banaction which is to incorporate banning agent
(usually some flavor of iptables rule), which can then be easily
overriden globally or per section
- Multiple actions are defined as action_* to serve as shortcuts
2007-01-04 18:08:09 +00:00
Yaroslav Halchenko
e8ce484c05
reworked init script a bit: waiting on stop and ping instead of status
2007-01-04 17:03:35 +00:00
Yaroslav Halchenko
a81dd8b103
boosted version
2007-01-03 16:09:43 +00:00
Yaroslav Halchenko
97ab74de5f
* Not applying patch any more for rigid python2.4 - it is default now in
...
sid/etch
2007-01-03 16:09:01 +00:00
Yaroslav Halchenko
4d5ec804f5
* Added filter ssh-ddos to fight DDOS attacks. Must be used with caution if
...
there is a possibility of clients accessing through unreliable connection
(Closes : #404487 )
2006-12-28 07:28:53 +00:00
Yaroslav Halchenko
832a8a4346
* Moved call to dh_pycentral before dh_installinit
...
* Removed unnecessary call of dh_shlibdeps
2006-12-22 18:56:51 +00:00
Yaroslav Halchenko
ebc5c6106f
HOSTisized vsftpd regex
2006-12-22 18:39:57 +00:00
Yaroslav Halchenko
caf85bf265
* Made fail2ban-server tollerate multiple <HOST> entries in failregex
2006-12-22 18:36:01 +00:00
Yaroslav Halchenko
ae96eaa40c
made failregex universal for both PAM and native vsftpd logging
2006-12-22 04:54:14 +00:00
Yaroslav Halchenko
2e992c2353
* Fail2ban now bans vsftpd logins (corrected logfile path and failregex)
...
(Closes : #404060 )
2006-12-21 16:54:39 +00:00
Yaroslav Halchenko
14a2a45dbc
releasing
2006-12-10 23:56:17 +00:00
Yaroslav Halchenko
762d1a188a
* NEWS.Debian confusions - the latest NEWS entry and postinst message were
...
rephrased (Closes : #402350 )
* Added mail-whois-lines action, which emails log lines containing abuser
IP. Those lines are often required for proper abuse reports sent to the
Internet providers. Forwarding of such received emails to the email
addresses of abuse departments present in the output of whois is a
tentative solution for semi-automatic abuse reporting (Closes : #358810 )
2006-12-10 23:40:04 +00:00
Yaroslav Halchenko
bbb9e6f094
* NEWS.Debian confusions - the latest NEWS entry and postinst message
...
were rephrased (Closes : #402350 )
2006-12-09 23:27:39 +00:00
Yaroslav Halchenko
ae58ed091a
* Removed obsolete patches left from 0.6
...
* Adjusted wsftpd patch to use <HOST> tag to be in line with the other
filter definitions
2006-12-08 02:28:07 +00:00
Yaroslav Halchenko
1755dc2b0a
updated the patch to the most recent release
2006-12-08 02:12:22 +00:00
Yaroslav Halchenko
7eac83b12d
fresh upstream release
2006-12-08 01:21:42 +00:00
Yaroslav Halchenko
6d3c52a965
slightly corrected description for interpolations/parameters
2006-12-07 23:10:30 +00:00
Yaroslav Halchenko
c46b9e0dca
* README.Debian describes a bit issue of interpolations vs parameters passed
...
from jail.{conf,local} into an action or a filter definition (closes:
#398739 )
* Removed Uploaded field from control since I am a DD now. Big thanks to
Barak Pearlmutter for being the sponsor of my packages for few
years.
2006-12-07 13:20:51 +00:00
Yaroslav Halchenko
3a738497f8
* Added Suggests on mailx and relevant comments in README.Debian about
...
invoking mail actions (closes : #396668 )
* Removed obsolete entries in TODO and README
* README.Debian describes a bit issue of interpolations vs parameters
passed from jail.{conf,local} into an action or a filter definition
(closes : #398739 )
* Initial version of postfix filter (closes : #377711 )
2006-12-07 04:07:59 +00:00
Yaroslav Halchenko
ff491e48fa
* Added debian/backports to contain patches necessary for backporting. It
...
gets used by pbuilder-ssh to create package for backports.org
2006-12-04 13:56:56 +00:00
Yaroslav Halchenko
e46346d371
fixed name spoiled by on vaio
2006-11-12 02:20:32 +00:00
Yaroslav Halchenko
953f6c75b9
ready to buzz Barak
2006-11-12 02:18:47 +00:00
Yaroslav Halchenko
b9b30341d4
* Cleaned up debian/rules a bit
2006-11-12 02:11:34 +00:00
Yaroslav Halchenko
f8a3605c97
* "Clean" target removes generated .pyc files now ( Closes : #398146 )
2006-11-12 02:02:23 +00:00
Yaroslav Halchenko
97abba906f
forgot to boost version
2006-11-11 00:11:59 +00:00
Yaroslav Halchenko
24ada3c63e
* Only block new connects by using a new action iptables-new instead of
...
iptables (Closes : #350746 )
* Updated README.Debian to reflect transition over to 0.7 branch and to
comment on 350746
2006-11-11 00:10:10 +00:00
Yaroslav Halchenko
5cc9bc9ce6
made ~ version to accumulate more fixes before duploading
2006-11-10 15:56:58 +00:00
Yaroslav Halchenko
6a9ed3501a
* Reincarnated logrotate configuration ( Closes : #397878 )
...
* no logrotation anymore? (Closes : #397878 )
2006-11-10 15:54:34 +00:00
Yaroslav Halchenko
f92a885d43
copied logrotate from 0.6 branch
2006-11-10 14:59:19 +00:00
Yaroslav Halchenko
f4015e0c3c
forgotten fi
2006-11-06 14:49:40 +00:00
Yaroslav Halchenko
28dad3752c
* Warning NEWS entry for 0.7.1 was not shown during installation on test
...
boxes, thus postinst was adjusted accordingly to inform the user about the
changes in the configuration files since 0.6.
2006-11-06 14:47:59 +00:00
Yaroslav Halchenko
6e1ec60318
put release to unstable
2006-11-06 14:29:56 +00:00
Yaroslav Halchenko
b457f61e74
* Added reload/force-reload actions to init script
...
* Adjusted jail.conf a bit
2006-11-06 14:23:58 +00:00
Yaroslav Halchenko
2e568c08d6
new upstream
2006-11-02 02:04:57 +00:00
Yaroslav Halchenko
4bbea5b41b
* Corrected init.d script to properly perform restart due to server delay to
...
react to client command to stop. Handling of status was adjusted as well
* Added apache-noscript to jail.conf
* Default action does not send emails to be inline with previous (0.6.x)
behavior
2006-10-30 03:32:29 +00:00
Yaroslav Halchenko
668ef068cf
* Fresh upstream: fixed a bug with not handling error producing
...
actioncheck call
2006-10-23 21:05:32 +00:00
Yaroslav Halchenko
1e4d6dd059
* debian/{rules,control} adjusted to conform all points in recent python
...
policy changes
* install under /usr/share instead of /usr/lib
2006-10-23 05:07:52 +00:00
Yaroslav Halchenko
6a2aaa4db7
* Adjusted rule to install man pages -- only .1 files since there are also
...
h2m sources
2006-10-23 04:49:52 +00:00
Yaroslav Halchenko
37d2abc8ea
* Currrent snapshot of trunk
...
* Removed outdated (applied in 0.7.4 or specific for 0.6.?) patches
from debian/patches
2006-10-23 04:45:34 +00:00
Yaroslav Halchenko
923d2214d9
added wuftpd to both 0.6 and 0.7
2006-10-18 05:15:53 +00:00
Yaroslav Halchenko
4ea2d8c370
few changelog entries
2006-10-02 19:28:23 +00:00
Yaroslav Halchenko
9851383362
fixed status command. now rely on presence of socket to be a bit more verbose
2006-10-02 19:27:30 +00:00
Yaroslav Halchenko
a45fadd183
News about the 0.7 release and adjusted init script so it fails to start if not root
2006-10-02 19:03:58 +00:00
Yaroslav Halchenko
8d3b4630f3
changed section names - removed -iptables. adjusted description
2006-09-29 13:22:23 +00:00
Yaroslav Halchenko
571c3d8c92
added suggests to python-gamin
2006-09-29 04:27:46 +00:00
Yaroslav Halchenko
cd46343d11
added few sections (patches + adjusted jail.conf shipped with Debian)
2006-09-29 04:21:16 +00:00
Yaroslav Halchenko
641cd14a40
preliminary packaging of 0.7.3 which gets closer to be used widely, i.e.
...
could be uploaded to experimental
2006-09-29 04:05:50 +00:00
Yaroslav Halchenko
0ae3032ac8
properly assigned to experimental
2006-09-06 13:35:13 +00:00
Yaroslav Halchenko
4ba8572d7f
adjusted the bantime to be 10min not 10sec
2006-09-05 15:26:37 +00:00
Yaroslav Halchenko
dae225330c
added debian specific patches for the new upstream
2006-09-05 15:16:03 +00:00
Yaroslav Halchenko
a4899fabf8
Initial minimalistic but working packaging of fail2ban 0.7.1
2006-09-05 06:10:29 +00:00
Yaroslav Halchenko
d125070fa4
now changes in this file are managed via dpatch
2006-08-15 22:13:44 +00:00
Yaroslav Halchenko
6e050675a8
adjusted manpage for fail2ban.conf
2006-08-15 21:35:37 +00:00
Yaroslav Halchenko
f85af540cf
updated timestamp
2006-07-07 00:20:22 +00:00
Yaroslav Halchenko
7fbc1b16a0
adjusted to comply with recent changed of debian python policy
2006-07-06 21:30:53 +00:00
Yaroslav Halchenko
ed6a45f1a6
added verbosity patch from one of my branches. fixed stupid indents
2006-07-04 03:40:14 +00:00
Yaroslav Halchenko
1f3e33e384
added verbosity patch from one of my branches
2006-07-04 03:36:39 +00:00
Yaroslav Halchenko
f7064d36c5
fixed empty ip and somewhat fixed locale issue
2006-07-04 03:03:45 +00:00
Yaroslav Halchenko
4309a11968
rm options adjusted, README.Debian to fix 373592
2006-06-14 16:22:43 +00:00
Yaroslav Halchenko
7b93d4ded5
section for saslauthd
2006-05-30 14:19:08 +00:00
Yaroslav Halchenko
2f930dfa76
now apache2 bug gets closed
2006-05-28 03:32:24 +00:00
Yaroslav Halchenko
fc9b8a887f
added proftpd section, adjusted vsftpd patch to dont interfer. boosted debian revision
2006-05-28 03:13:56 +00:00
Yaroslav Halchenko
1fbcf9a9a5
removed bashism from init.d script
2006-05-22 19:38:51 +00:00
Yaroslav Halchenko
537399dbc9
placed binary-arch target back to comply with the policy
2006-05-16 20:46:27 +00:00
Yaroslav Halchenko
ac9362ae5b
fixed binary-indep binary-arch separation
2006-05-16 20:28:31 +00:00
Yaroslav Halchenko
e801352c78
removed compilation of *.pyc
2006-05-16 20:11:05 +00:00
Yaroslav Halchenko
302c1b1c4b
debhelper and dpatch belong to Build-Depends now
2006-05-16 20:08:32 +00:00
Yaroslav Halchenko
87ed38b378
debhelper and dpatch belong to Build-Depends now
2006-05-16 20:07:37 +00:00
Yaroslav Halchenko
9af3da8b57
small clean up
2006-05-16 19:59:38 +00:00
Yaroslav Halchenko
589fb2a217
migrated to using dpatch. fixed vsftpd regexp
2006-05-10 18:01:06 +00:00
Yaroslav Halchenko
0c9aef1b0a
added lsb-base in depends for init.d script
2006-04-28 04:42:55 +00:00
Yaroslav Halchenko
4fa38338d7
merged with proposed init.d script from Aaron
2006-04-28 04:13:23 +00:00
Yaroslav Halchenko
a3badc1fff
small adjustments in copyright and watch
2006-04-25 19:58:36 +00:00
Yaroslav Halchenko
8123a4886a
modified maxreinits
2006-03-27 17:56:38 +00:00
Yaroslav Halchenko
5425d6b96a
fixed copyright file
2006-03-27 04:40:56 +00:00
Yaroslav Halchenko
73074157ac
proper version for Barak
2006-03-20 00:41:27 +00:00
Yaroslav Halchenko
49bf5a991b
added fwchain
2006-03-19 23:45:52 +00:00
Yaroslav Halchenko
f771a9be28
added examples
2006-03-19 05:32:10 +00:00
Yaroslav Halchenko
435f870b13
minor modifications: examples, proper conf file copying
2006-03-19 05:27:42 +00:00
Yaroslav Halchenko
4fa0eba064
merged with upstream release 0.6.1
2006-03-19 05:20:44 +00:00
Yaroslav Halchenko
49e8d86983
finalized at -8 revision -- now will upgrade to 0.6.1 upstream
2006-03-17 00:38:23 +00:00
Yaroslav Halchenko
193a98c97a
rearranging, cleaning up2
2006-03-11 06:02:46 +00:00
Yaroslav Halchenko
7693ede193
rearranging, cleaning up
2006-03-11 06:02:22 +00:00
Yaroslav Halchenko
899c6d54df
fixed a typo in failregex for SSH
2006-03-09 20:23:46 +00:00
Yaroslav Halchenko
0321fd4689
added postrm script to clean up the log files
2006-03-05 19:51:01 +00:00
Yaroslav Halchenko
b3dd9fd5ab
For capitalized nasty log entries of sshd
2006-03-03 21:37:05 +00:00
Yaroslav Halchenko
046f219eaf
adjusted
2006-03-03 21:14:34 +00:00
Yaroslav Halchenko
f8eaf92733
added Uploaders field with Barak
2006-02-27 01:12:55 +00:00
Yaroslav Halchenko
f22d4912c2
Fixed Apache section to point at error.log
2006-02-26 01:04:17 +00:00
Yaroslav Halchenko
5ca08578af
ready for Barak"s upload
2006-02-18 01:43:00 +00:00
Yaroslav Halchenko
73f0ed8976
changed ownership of all existing logs
2006-02-16 16:23:05 +00:00
Yaroslav Halchenko
165354d87c
spell
2006-02-16 16:19:58 +00:00
Yaroslav Halchenko
b00161f7ec
fixed #352053
2006-02-16 15:53:38 +00:00
Yaroslav Halchenko
438e4edfd8
moved dh_python into binary-indep, added another regex for attacks
2006-02-16 15:43:35 +00:00
Yaroslav Halchenko
d8c1587130
added NEWS
2006-02-10 18:08:22 +00:00
Yaroslav Halchenko
eb4047f85c
fixed timeregex for apache
2006-02-10 18:08:01 +00:00
Yaroslav Halchenko
38fa465cae
less failures required for Attacks
2006-01-25 15:32:50 +00:00
Yaroslav Halchenko
9cf01b2dac
relaxed regex for awstat.pl a bit
2006-01-25 15:12:44 +00:00
Yaroslav Halchenko
27b0bdfd22
added awstats.pl capturer
2006-01-25 14:58:52 +00:00
Yaroslav Halchenko
55d7440fe1
decided to use "interpolations" in the config file to make it more readable
2006-01-15 20:18:39 +00:00
Yaroslav Halchenko
a0dfb0f9e6
minor - removed default private networks from safe list
2006-01-15 20:07:07 +00:00
Yaroslav Halchenko
7d9c08bc22
fix for bug #343821 : path is not appended but inserted first
2005-12-19 15:50:01 +00:00
Yaroslav Halchenko
1d6d67f95f
minor notes
2005-11-21 02:50:08 +00:00
Yaroslav Halchenko
542939e7c7
minor adjustment
2005-11-21 01:48:57 +00:00
Yaroslav Halchenko
bd3d510f96
merged with upstream 0.6.0
2005-11-21 01:43:13 +00:00
Yaroslav Halchenko
3e2a09cdf7
fixes race condition bug #339133
2005-11-20 19:53:37 +00:00
Yaroslav Halchenko
8ce3c2c19e
fixed init.d script so it doesn"t fail on stop action if fail2ban is not running
2005-11-03 22:18:40 +00:00
Yaroslav Halchenko
6efa9597c9
fixed changelog back to normal... damn -svn-tag-only
2005-10-31 22:08:56 +00:00
Yaroslav Halchenko
909f05351e
added localtime config option to MAIL
2005-10-31 22:04:11 +00:00
Yaroslav Halchenko
1e0cb0326e
decided to swith to proper debian versioning
2005-10-21 01:22:59 +00:00
Yaroslav Halchenko
a1509ae1e4
init.d script fixed
2005-10-21 01:20:17 +00:00
Yaroslav Halchenko
f322d7205a
Trying to fix it up a bit
2005-10-20 17:46:13 +00:00
Yaroslav Halchenko
4206c543a3
Trying to fix it up a bit
2005-10-20 17:46:00 +00:00
Yaroslav Halchenko
a40245010f
* Fixed typos (thanx to Ross Boylan).
...
* Robust startup: if iptables module gets fully initialized after
startup of fail2ban, fail2ban will do "maxreinit" attempts to
initialize its own firewall. It will sleep between attempts for
"polltime" number of seconds (closes : #334272 ).
* To overcome possible conflict with other firewall solutions and as a
secondary solution for the bug 334272, fail2ban startup is moved
during bootup to the latest (S99) sequenece position. That should not
cause any discomfort I believe.
2005-10-20 17:33:53 +00:00
Yaroslav Halchenko
51d453a3d2
fixed issue with crashing on wrong log file
...
added a cleanup of firewall on emergency exit
2005-10-16 15:07:47 +00:00
Yaroslav Halchenko
e9792f95f6
fixed enabledsections to handle MAIL properly
2005-10-15 16:12:45 +00:00
Yaroslav Halchenko
d4ee4645ec
added -e (enabledsections) command line parameter
2005-10-15 05:47:35 +00:00
Yaroslav Halchenko
ac5242815f
fixed an issue with command line parameters
2005-10-15 05:14:56 +00:00
Yaroslav Halchenko
f2136c09d5
fixing the issue with disregarding command line parameters
2005-10-14 21:27:19 +00:00
Yaroslav Halchenko
91df9c7526
applied Cyril"s modifications to my patch for missing chain
2005-10-14 14:59:47 +00:00
Yaroslav Halchenko
501955f36a
adjusted README: removed part about missing chain because the issue is
...
resolved by now
Also postinst announces about necessity to upgrade the config file
2005-10-12 17:21:45 +00:00