Yaroslav Halchenko
c7ae460b8a
Merge remote-tracking branch 'github_kwirk_fail2ban/multi-line' into 0.9
...
* github_kwirk_fail2ban/multi-line:
Revert changes to man/fail2ban-client.1
Removed "common.local" include for FilterReader test
Added 'maxlines' option to fail2ban-regex
Regex get(Un)MatchedLines now returns whole lines only
Added FilterReader test
Added multiregex test for multi-line filter
ignoreregex now functions correctly with multiline
Minor typo in server/failregex.py
Added <SKIPLINES> regex applicable for multi-line
Sanitise testcase log 04
Changed multi-line test to provided example
Filter for multi-line now stores last time match
Simplify and change some filter line buffer
Initial changes and test for multi-line filtering
2013-02-11 16:01:11 -05:00
Yaroslav Halchenko
5f2d3832f7
NF: roundcube-auth filter (to close Debian #699442 , needing debian/jail.conf section)
2013-01-31 14:41:34 -05:00
Steven Hiscocks
02218294bc
Removed "common.local" include for FilterReader test
2013-01-28 18:41:12 +00:00
Steven Hiscocks
d05f420758
Added FilterReader test
2013-01-25 18:28:48 +00:00
Steven Hiscocks
7234c2a3aa
Added multiregex test for multi-line filter
2013-01-25 18:16:55 +00:00
Steven Hiscocks
ea466d59f4
ignoreregex now functions correctly with multiline
...
Ignore regexs are now only compared to lines that match the failregex.
Supporting test also added for multiline regex and overlapping
multiline regex matches.
2013-01-25 18:11:40 +00:00
Steven Hiscocks
9b4806bfd3
Added <SKIPLINES> regex applicable for multi-line
...
This allows lines captured by <SKIPLINES> regex to remain in the line
buffer in Filter
2013-01-24 18:20:43 +00:00
Steven Hiscocks
5952819a58
Sanitise testcase log 04
2013-01-23 19:32:55 +00:00
Steven Hiscocks
00ab425492
Changed multi-line test to provided example
2013-01-23 19:10:27 +00:00
Steven Hiscocks
055aeeb227
Filter for multi-line now stores last time match
...
This is useful for log files which dont contain a date/time on every
line
2013-01-23 18:42:25 +00:00
Steven Hiscocks
aec709f4c1
Initial changes and test for multi-line filtering
2013-01-22 20:54:14 +00:00
Yaroslav Halchenko
9a39292813
ENH: Added login authenticator failed regexp for exim filter
2013-01-04 15:23:05 -05:00
Yaroslav Halchenko
21e966e4bb
example logs should carry the same name as the filter they are devised for
2012-12-13 08:24:02 -05:00
pigsyn
123d457924
Update testcases/files/logs/Webmin
2012-12-13 08:33:07 +01:00
pigsyn
38dd1506cc
Sample Webmin logs
2012-12-12 23:25:31 -08:00
Yaroslav Halchenko
68c1defb76
ENH: added dovecot example from Daniel Black + example with DoS attempt via injected rhost
2012-12-12 09:16:27 -05:00
hamilton5
ccc62ddbf3
Update testcases/files/logs/dovecot
2012-12-11 12:05:01 -05:00
hamilton5
c534c1d03d
Update testcases/files/logs/dovecot
2012-12-11 11:05:22 -05:00
Yaroslav Halchenko
fc27e00290
ENH: tune up sshd-ddos to use common.conf and allow training spaces
2012-12-07 15:24:34 -05:00
Yaroslav Halchenko
1e12c220e6
minor: added a note on now "negative" log entries on "POSSIBLE BREAK-IN ATTEMPT"
2012-11-05 21:22:33 -05:00
François Boulogne
958a1b0a40
Lighttpd: support auth.backend = "htdigest"
2012-09-30 13:27:21 +02:00
Yaroslav Halchenko
2082fee7b1
ENH: match possibly present "pam_unix(sshd:auth):" portion for sshd ( Closes : #648020 )
2012-07-31 15:53:41 -04:00
Yaroslav Halchenko
6ad55f64b3
ENH: add wu-ftpd failregex for use against syslog ( Closes : #514239 )
2012-07-31 15:43:13 -04:00
Yaroslav Halchenko
3989d24967
BF: usedns=no was not working at all
...
it was not adding any detected address, IP or not to the list of failed attempts
This commit also adds appropriate unittest
2012-06-15 23:43:11 -04:00
Petr Voralek
4007751191
ENH: catch failed ssh logins due to being listed in DenyUsers. Close gh-47 ( Closes : #669063 )
2012-04-16 20:36:53 -04:00
Xavier D
7a76838737
Add sample log file for asterisk
2012-02-13 17:57:55 +01:00
François Boulogne
115092956f
Correction of the IP in testcase for lighttpd
2011-12-25 20:15:57 +01:00
François Boulogne
683d4f269d
modifications suggested by a referee (log ex+regexp)
2011-12-24 22:24:08 +01:00
Yaroslav Halchenko
fceff2d5b9
moving log samples under testcases/files
2011-11-18 11:57:20 -05:00
Cyril Jaquier
e581913c1f
- Added more filter test cases
...
git-svn-id: https://fail2ban.svn.sourceforge.net/svnroot/fail2ban/trunk@425 a942ae1a-1317-0410-a47c-b1dcaea8d605
2006-10-19 21:50:30 +00:00
Cyril Jaquier
ee86212435
- Updated testcases to fix the time using MyTime
...
git-svn-id: https://fail2ban.svn.sourceforge.net/svnroot/fail2ban/trunk@419 a942ae1a-1317-0410-a47c-b1dcaea8d605
2006-10-18 22:35:32 +00:00
Cyril Jaquier
ea1948eff4
- Initial commit of the new development release 0.7
...
git-svn-id: https://fail2ban.svn.sourceforge.net/svnroot/fail2ban/trunk@249 a942ae1a-1317-0410-a47c-b1dcaea8d605
2006-06-26 20:05:00 +00:00