sebres
be3e95b76d
Merge branch '0.10-fwcmd-fix-test' into 0.10
9 years ago
sebres
0c44ecfc77
action.d/firewallcmd-ipset.conf: different name of the match set's for IPv4/IPv6, using conditional <ipmset>, analog to the iptables-ipset;
...
test cases for 3 firewallcmd extended;
9 years ago
Serg G. Brester
0d0e1853c4
Merge pull request #1424 from TorontoMedia/firewallcmd
...
ENH: Branch 0.10 - updated firewallcmd actions
9 years ago
Serg G. Brester
e0da359a5a
Merge pull request #1423 from yarikoptic/0.10
...
ENH: version Fail2Ban in this branch as 0.10.0 alpha 1
9 years ago
Serg G. Brester
d742bc2834
Merge pull request #1422 from sebres/0.10-fix-multi-set
...
0.10 fix multi-set and database binding parameters
9 years ago
TorontoMedia
ffebde68e0
Update firewallcmd-multiport.conf
9 years ago
TorontoMedia
07de83e04a
Update firewallcmd-common.conf
9 years ago
TorontoMedia
810d5996b5
Update firewallcmd-rich-logging.conf
9 years ago
TorontoMedia
7e54cee8d6
updated firewallcmd actions
9 years ago
Yaroslav Halchenko
2b6f8737a7
ENH: version Fail2Ban in this branch as 0.10.0 alpha 1
9 years ago
sebres
d420148055
database: always explicit convert `ip` to `str`, because may be an IPAddr, that will be unsupported type by bind parameter (as long as we've found any default wrapper handler for sqlite3)
9 years ago
sebres
cb280b817f
csocket multi-set fix: prevent to convert `list`, `dict`, `set` during transfer (send), this offers a sending of 'multi-set' arrays
...
(missed by cherry-picking from multi-set branch)
9 years ago
sebres
e0924e0d1b
test case fix (always sort result of `DNSUtils.textToIp`, because order of result from `socket.getaddrinfo` is undefined (system depended)
9 years ago
sebres
3d3735706b
invalid recursion check in substituteRecursiveTags: for example action `bsd-ipfw` produced ValueError('properties contain self referencing definitions and cannot be resolved...')
...
test cases extended for exactly this case and for all stock actions;
closes gh-1417
9 years ago
Serg G. Brester
1791fd59f2
Merge pull request #1418 from yarikoptic/pr-1415
...
DOC: minor PEP8ing and comments enhancements
9 years ago
Yaroslav Halchenko
a9c563fed2
Merge pull request #1415 from sebres/0.10-fixes
...
0.10 fixes
9 years ago
Yaroslav Halchenko
14c31d8c58
DOC: minor PEP8ing and comments enhancements
9 years ago
sebres
ec6032d934
prevent to fail stock configs test case, if any jail custom config does not have own test log-file (perhaps not clean copy)
9 years ago
sebres
4b5b16cd9f
allow using of IPv6 address style mask (analog to the IPv4), for example: `2606:28ff::/ffff:ff80::` -> `2606:2880::/25`
...
fast calculating of maskplen using map table MAP_ADDR2MASKPLEN, with pre-calculated addr->maskplen values;
test cases extended;
9 years ago
sebres
0c2eeee8c7
BF: fail2ban-client can't unserialize IPAddr objects - added IPAddr pickle-handler, that simple wrap IPAddr to the str
9 years ago
sebres
9b72522a01
todo fix: not necessary in 0.10 branch
9 years ago
sebres
3df97beaa6
changelog entries from sebres:f2b-perfom-prepare-716 (gh-1346)
9 years ago
sebres
c22ba5413d
changes from ipv6-support-0.10 after merge
9 years ago
sebres
f9ea845595
Merge branch 'ipv6-support-0.10' into 0.10
9 years ago
sebres
23ad50dbaa
correct <HOST> expression in failregex (now IPv6 will be really found from filter);
...
respect standard spelling of IPv6 (with port) enclosed in brackets ([ipv6]:port), to prevent the necessarily changing of many filter definitions, comparison:
#IPv4:
127.0.0.1:55555
#IPv6:
[a🅱️ c:d::1]:55555
some small fixes (in test cases also) and code review and few optimizations;
9 years ago
sebres
f47fdf8918
code coverage: extend conditional test with direct replacement inside replaceTag (besides recursive sub tags)
9 years ago
sebres
e8203dabba
python 2.6 compatible test cases
9 years ago
sebres
9da7bb1068
meantime commit: code review, simplification, pythonization, etc. (test cases passed)
9 years ago
Alexander Koeppe
50e5a7e538
More beautifier tests
9 years ago
sebres
d65e37e93d
CIDR splitting functionality moved from filter to IPAddr;
...
meantime commit: code review, simplification, pythonization, etc. + test cases extended
9 years ago
Alexander Koeppe
1b21f21c22
CIDR represenation if IPAddr object is a network prefix
9 years ago
sebres
941a2b6c82
clean up unnecessarily resp. directly unused action properties, because they are ambiguous now;
...
implemented caching functionality for same substitutions inside replaceTag: very actual and extreme performance growth (up to 1000 times) for ban/unban because too slow substituteRecursiveTags by several tags and many includes, but totally unnecessary as long as parameters are not changing;
9 years ago
sebres
504e5ba6f2
actions support IPv6 now:
...
- introduced "conditional" sections, see for example `[Init?family=inet6]`;
- iptables-common and other iptables config(s) made IPv6 capable;
- several small code optimizations;
* all test cases passed (py3.x compatible);
9 years ago
sebres
75028585c0
test cases extended for verifying ipv4/ipv6, normalized pf-action with test case
9 years ago
Alexander Koeppe
ed2f3ef77d
improve PF action and make IPv6 aware
9 years ago
sebres
1a6450643d
partially cherry pick from branch 'multi-set', prepare for conditional config parameters logic:
...
- new readers logic (group some by multiple parameters 'set' -> 'multi-set';
- prevent to add 'known/' parameters twice (by merge section etc);
- test cases fixed;
# Conflicts:
# fail2ban/client/actionreader.py
9 years ago
sebres
43c0f3cdc4
test cases extended
9 years ago
sebres
2497b05abc
test cases preliminary extended;
9 years ago
sebres
25d6cf8dd2
fix suhosin_log in common paths - log files should be separated using "\n":
...
prevents to throw an error "File option must be 'head' or 'tail'", if jail suhosin will be enabled.
9 years ago
sebres
9b06c325e1
2nd wave: code review, simplification, pythonization, etc. (test cases passed)
9 years ago
Yaroslav Halchenko
c1a54974e9
RF/ENH: 1st wave of IPAddr pythonization - properties, logical statements, etc
...
# Conflicts:
# fail2ban/server/ipdns.py
9 years ago
Yaroslav Halchenko
5040c95bdb
DOC: stub for 0.10.0 release changelog
9 years ago
Alexander Koeppe
dbd7e347b1
new testcase to test beautifier code
9 years ago
Alexander Koeppe
4274ae89c6
Quite little adjustments on tests and return value
...
# Conflicts:
# fail2ban/server/ipdns.py
9 years ago
sebres
8cb4a3f59e
move DNTUtils, IPAddr related code to dedicated source file ipdns.py (also resolves some cyclic import references)
9 years ago
sebres
6985531e91
meantime commit: code review, simplification, pythonization, etc. (test cases passed)
9 years ago
Alexander Koeppe
9ede535a61
remove obsolete IP related code from DNSUtils class
...
# Conflicts:
# fail2ban/server/filter.py
9 years ago
Alexander Koeppe
ce196744d1
Update ChangeLog / THANKS entries
9 years ago
Alexander Koeppe
db9f3f738f
add ip6-loopback to default ignoreip statement
9 years ago
Alexander Koeppe
d125f882d4
explicitely treat join arguments as string in beautifier
9 years ago