Commit Graph

1887 Commits (bbca81f34cb8104a71f6508dba4c7e2d776ac7fe)

Author SHA1 Message Date
sebres 99ff701678 remove support of python 2.x
1 year ago
sebres eebef0089c avoid double counting for "maximum authentication attempts exceeded" ("Disconnecting ..." is no failure anymore, now it's helper only);
1 year ago
Sergey G. Brester 66e195b0f3
jail.conf: comment only (time abbr format), no function changes
1 year ago
Sergey G. Brester 809b904106
filter.d/exim.conf: fixes "dropped: too many ..." regex and also matches unrecognized commands new vector
2 years ago
Sergey G. Brester e73748c442
Merge branch 'master' into mikrotik
2 years ago
Sergey G. Brester 9cbf59c827
anchored datepattern and added journalmatch (if monitoring systemd journal)
2 years ago
Sergey G. Brester 2c0360d178
Merge branch 'master' into nginx-forbidden
2 years ago
Sergey G. Brester c7f8b75e7e
action.d/cloudflare-token.conf: fixes #3479, url-encode args by unban
2 years ago
Duncan Bellamy 7dc32971f8 changed missed names
2 years ago
Duncan Bellamy 9b1417a169 apply suggestions
2 years ago
Sergey G. Brester d46ec3a555 add jail boundary to flush command for more precise targeting of jail (if some name may be equal to prefix of other name)
2 years ago
Duncan Bellamy 5781675a7d change startcomment and comment so correct rules are flushed
2 years ago
Duncan Bellamy ac2076ef4f change unban back to find comment so correct entry always deleted
2 years ago
Duncan Bellamy 0e3e9b1d7f Add flushaction
2 years ago
Duncan Bellamy 9997807fb3 Add action for mikrotik routerOS
2 years ago
Sergey G. Brester efbbcb41ea
non capturing group
2 years ago
Sergey G. Brester 996553f330
review, simplify regex and capture user name
2 years ago
Andrey Alekseenko df91b047d2 Dante SOCKS server: handle "1 byte/second" case
2 years ago
Andrey Alekseenko 05c162ef10 Create filter for Dante SOCKS server
2 years ago
Sergey G. Brester ae5fe2e003
amend to #3405, eliminate catch-all
2 years ago
sebres cbb097a2b3 small amend (non capturing group)
2 years ago
sebres 82506f0586 filter.d/selinux-ssh.conf, filter.d/selinux-common.conf: fixes #3405 (new format with GS and additional parameters, e. g. grantors)
2 years ago
sebres d8e2b03a24 `filter.d/named-refused.conf` extended (closes gh-3388):
2 years ago
sebres ca2b94c522 fixes gh-3370: resolve extremely long search by repeated apply of non-greedy RE `(?:: (?:[^\(]+|\w+\([^\)]*\))+)?` with following branches (it may be extremely slow up to infinite search depending on message); added new regression tests
2 years ago
Jeff Johnson f9f78ed9d2
IPThreat integration (#3349)
2 years ago
sebres d6896eb26d New logtarget: systemd-journal;
2 years ago
sebres a08b925468 Merge branch '0.11'
2 years ago
sebres 467024797f Merge branch '0.10' into 0.11
2 years ago
Sergey G. Brester e289a1155e
Merge pull request #3269 from Logic-32/feature/cloudflare-token
2 years ago
Sergey G. Brester 514cca9ade
filter.d/sendmail-auth.conf: detect failures without user part
2 years ago
Sergey G. Brester a2264dcef0
Merge pull request #2636 from brianjmurrell/patch-2
2 years ago
Sergey G. Brester 3e9321e71b
non-capturing group and any variant of suffix
2 years ago
sebres 9272cce13d Merge branch '0.11'
3 years ago
sebres a69d42cea5 Merge branch '0.10' into 0.11
3 years ago
Sergey G. Brester fbfc85d8c0
common.conf: fixed typo in comment (rfc5424 for logtype)
3 years ago
Logic-32 d11ad3b90f Adding jail name to notes to disambiguate between jails.
3 years ago
Logic-32 e89b2c0ff7 Moving inet6 family block to the end so other config doesn't get added to it.
3 years ago
Logic-32 7e7b9f4a35 Adding support for Cloudflare Token API.
3 years ago
sebres a2431158f6 implements new interpolation variable `%(fail2ban_confpath)s` (automatically substituted from config-reader path, default `/etc/fail2ban` or `/usr/local/etc/fail2ban` depending on distribution); `ignorecommands_dir` is unneeded anymore, thus removed from `paths-common.conf`;
3 years ago
sebres 13520a0494 Merge branch '0.11'
3 years ago
sebres 8ac49b5858 Merge branch '0.10' into 0.11
3 years ago
László Károlyi f380d6202d cherry pick #3210 from master
3 years ago
sebres 498e473a10 filter.d/courier-auth.conf: consider optional port after IP, regex is rewritten without catch-all's and right anchor, so it is more stable against further modifications now;
3 years ago
sebres 810386a265 filter.d/dovecot.conf: parse everything in parenthesis by auth-worker info, e. g. can match (pid=...,uid=...) too
3 years ago
Sergey G. Brester dfc866ea41
improve RE to solve conflict with expected another open parenthesis
3 years ago
László Károlyi 0f1706d4a1
Adjusting for updated dovecot log format
3 years ago
sebres 06d2623c5e iptables and iptables-ipset actions extended to support multiple protocols with single action for multiport or oneport type (back-ported from nftables action);
3 years ago
sebres b639c8869c make several iptables actions more breakdown-safe: start wouldn't fail if chain or rule already exists (e. g. created by previous instance and doesn't get purged properly);
3 years ago
sebres 3d7e3bc2fb make ipset actions more breakdown-safe: start wouldn't fail if set with this name already exists (e. g. created by previous instance and don't deleted properly)
3 years ago
sebres 7db1c97a3e Merge remote-tracking branch 'remotes/sebres/1.0-breakdown-safe-actions' with master;
3 years ago