sebres
c14327565d
version bump
7 months ago
sebres
61799e15e1
release 1.1.0 -- object-found--norad-59479-cospar-2024-069a--altitude-36267km
7 months ago
sebres
22ffe12abb
preparing release
7 months ago
sebres
7b528a6da6
example.com seemed to switch its IPs, replace them everywhere (and use test IP-range instead where it is possible)
7 months ago
sebres
3ca3646472
implemented `fail2ban-client stats` (or alias `fail2ban-client statistic[s]`) for tabulated output of fail2ban stats
...
amend to #2975
7 months ago
sebres
bdba42edd9
implemented `fail2ban-client status --all [flavor]`
...
closes #2975
7 months ago
sebres
921d9a5a40
Merge branch 'gh-2655--f2b-regex-4-jail': implemented loading of jail settings in fail2ban-regex;
...
amend to RFE gh-2655
8 months ago
sebres
3b97182f62
amend to 781321d6092d415e079439389e6e6588b8feaaa7: better regex to detect jail name (it could contain dot etc)
8 months ago
Sergey G. Brester
b59fd2e7b5
Merge pull request #3697 from remontti/patch-1
...
named-refused.conf: denied allows any reason in parenthesis as suffix
8 months ago
sebres
44f32d6132
changelog
8 months ago
sebres
2c13cba73d
loosening for denied suffix (would match no matter which reason in parenthesis);
...
add coverage for denied with "(allow-query-cache did not match)"
8 months ago
Rudimar Remontti
fd7657f9a9
Update named-refused.conf
8 months ago
sebres
4550e3ad27
ChangeLog: reorder (filters after actions)
8 months ago
sebres
a4ca2e83bd
Merge branch 'gh-3060': adjusted `filter.d/exim.conf` and `filter.d/exim-spam.conf`:
...
- messages are prefiltered by `prefregex` now
- filter can bypass additional timestamp or pid that may be logged via systemd-journal or syslog-ng (gh-3060)
closes #3060
8 months ago
sebres
1ec9237e53
bypass additional pid in prefix (may be logged by syslog-ng, gh-3060); matches protocol error with authentication mechanism not supported
8 months ago
sebres
c80908837f
`filter.d/exim.conf`:
...
- messages are prefiltered by `prefregex` now
- filter can bypass additional timestamp that may be logged via systemd-journal (gh-3060)
8 months ago
Sergey G. Brester
e0f1a1e02a
Merge pull request #3702 from bes-internal/exim
...
exim: final `<HOST>` to `<ADDR>` conversion
8 months ago
Vladimir Varlamov
8da0a99cde
pid part may contain full hostname
8 months ago
Vladimir Varlamov
806a27cb4f
final `<HOST>` to `<ADDR>` conversion
8 months ago
Sergey G. Brester
5ecc26d3ba
Merge pull request #3701 from bes-internal/exim
...
filter.d/exim.conf: rewrite host line regex for all varied exim's log_selector states
8 months ago
sebres
e605415f61
simplify fields-group a bit (everything up to 4 chars long but H), so it'll be faster (no multiple branches) as well as would theoretically accept future enhancements of logged fields.
8 months ago
sebres
c22a83933b
let's use `<ADDR>` instead `<HOST>` - only IPs expected, since host-name bypassed before it (directly after H=)
8 months ago
Vladimir Varlamov
df94ec4c52
filter.d/exim.conf: rewrite host line regex for all varied exim's log_selector states
...
Depending on Exim's log_selector settings, log lines may contain additional information about the connection. And also the line itself with the address of the remote host can vary greatly. But fortunately, all states can be found in the Exim code itself and taken into account. Makes it easier to add new regexps.
Closes #3263
8 months ago
Anton Samets
0c125ec9c9
filter.d/postfix.conf: add Sender address rejected: Malformed DNS server reply ( #3590 )
...
* add Sender address rejected: Malformed DNS server reply
8 months ago
sebres
77b052fdea
amend to df9584505aea0e8570fb53dd5a8e43f8b3af994a (for gh-3487): setup must install fail2ban.compat
8 months ago
sebres
5a59b0bae2
filter.d/apache-common.conf: accepts remote instead of client
...
(closes gh-3622)
8 months ago
Sergey G. Brester
f63868b3e8
filter.d/apache-common.conf: remote besides client, gh-3622
8 months ago
Sergey G. Brester
9ca137b42b
test for apache-auth with remote, gh-3622
8 months ago
Sergey G. Brester
529eb79ddb
Merge pull request #3692 from pingou2712/postfixSystemd
...
Change journalmatch postfix
8 months ago
Vincent Laffargue
d260ed31d2
Maintain backward compatibility Postfix SYSTEMD_UNIT
9 months ago
Sergey G. Brester
8be16f1c1c
Merge pull request #3693 from pingou2712/ModifRecidive
...
Change Regex Recidive and journalmatch For Systemd Match
9 months ago
Sergey G. Brester
f12917c491
recidive: test case for journal log-format
9 months ago
Sergey G. Brester
dd3c78ecab
filter.d/recidive.conf: conditional RE depending on logtype (for file or journal)
9 months ago
Vincent Laffargue
0b63fc312d
Change Regex Recidive and journalmatch For Systemd Match
9 months ago
Vincent Laffargue
93082ead79
Change journalmatch postfix
9 months ago
Sergey G. Brester
383adec83c
Merge pull request #3690 from karolyi/master
...
Add to postfix accepted logs
9 months ago
Sergey G. Brester
45d7f3cb97
no space in any case
9 months ago
László Károlyi
ff701e94c3
Add to postfix syslog daemon format
9 months ago
sebres
3047572701
set restored mark on ticket before ignore invocation (it can be checked in `ignorecommand`, considered by `ignorecache`, etc)
9 months ago
sebres
dce2c608c1
Merge branch 'gh-3486'
...
filter.d/sshd.conf: ddos/aggressive mode extended to match new messages caused by port scanner, wrong payload on ssh port:
- message authentication code incorrect [preauth]
- connection corrupted [preauth]
- timeout before authentication
9 months ago
sebres
4f679a56e0
filter.d/sshd.conf: ddos/aggressive mode extended to match new messages caused by port scanner, wrong payload on ssh port:
...
- message authentication code incorrect [preauth]
- connection corrupted [preauth]
- timeout before authentication
closes gh-3486
9 months ago
sebres
9bedc3c383
Merge branch 'gh-2655--f2b-regex-4-jail': implemented loading of jail settings in fail2ban-regex;
...
closes gh-2655
11 months ago
sebres
302252b25c
ChangeLog, gh-2655
11 months ago
sebres
cab6f93364
fail2ban-regex: fixes forgotten basedir (-c "$basedir") of jailreader
11 months ago
sebres
b3178851fe
test coverage (restore usage with filter and load setting from jail)
11 months ago
sebres
781321d609
fail2ban-regex: loading parsing settings from jail now (by simple name it'd prefer jail to the filter now), fallback:
...
- fail2ban-regex ... sshd
+ fail2ban-regex ... filter.d/sshd
closes gh-2655
11 months ago
sebres
7de1057f94
avoid DNS of local names in fast tests (small optimization)
11 months ago
sebres
dd4431cd63
remove remaining tweaks for obsolete python
11 months ago
Sergey G. Brester
e1b7720d43
Merge pull request #3268 from Logic-32/feature/smtp-ssl
...
`action.d/smtp.py` - add support for TLS SMTP connections.
11 months ago
sebres
0c2edfacb0
combine smtpd and aiosmtpd tests; encapsulate smtp facilities to setUpClass/tearDownClass (behaves like a singleton, doesn't start smtp server per test); don't generate cert every time (too slow by RSA:2048, use short ECC:256 instead);
...
drastically speedup all smtp-action tests
11 months ago