Vladimir Chumak
fafefc0293
Add Jorgee Vulnerability Scanner protect
...
Details for Jorgee Vulnerability Scanner: https://www.symantec.com/security_response/attacksignatures/detail.jsp?asid=30164
7 years ago
sebres
acd9e8155b
Merge pull request #1376 from j-marz/master:
...
Added ZoneMinder filter
7 years ago
sebres
4163f32968
small review, prefix replaced with `%(_apache_error_client)s` from apache-common.conf include
7 years ago
john
ac95449bbb
changed zoneminder regex as per Sebres and yarikoptic recommendations
7 years ago
john
7013729a1f
removed redundant options for zoneminder from jail.conf
7 years ago
john
5c3a666380
fixed incomplete regex after adding anchors
7 years ago
john
3d45fd2713
implemented yarikoptic's suggestions in fail2ban pull request #1376
7 years ago
john
776d463e92
added missing colon to failJSON
7 years ago
john
4d8ba7b668
fixed test log file
7 years ago
john
44c4496e49
added sample log files
7 years ago
john
08878d22dd
added zoneminder.conf filter
7 years ago
john
a90f6c4ae8
added zoneminder jail and filter
...
# Conflicts:
# config/jail.conf
7 years ago
sebres
c312962029
filter.d/dovecot.conf: partially cherry-pick to 0.9 PR #1880 from sebres/0.10-fix-dovecot-regex ( d926e11a5c
)
...
fixed failregex (without new mode aggressive)
7 years ago
sebres
32058ed268
Merge remote-tracking branch 'remotes/gh-upstream/0.10' into 0.11
7 years ago
Serg G. Brester
d926e11a5c
Merge pull request #1880 from sebres/0.10-fix-dovecot-regex
...
filter.d/dovecot.conf: fixed failregex + new mode aggressive
7 years ago
sebres
2cfc53c08e
remove capturing groups
7 years ago
sebres
9b8563f35e
- fixes regex for message `imap-login: Disconnected (auth failed, X attempts) ...` has to many variations on additional info after `<HOST>`,
...
leave it end-anchored because variable part `user=<[^>]*>` (before `<HOST>`) to avoid injecting, but can be safe rewritten using `[^>]*` in opposite to "greedy" `user=<[^>]*>`.
- introduces mode `aggressive` and extends regex for this mode to match:
* no auth attempts (previously removed in gh-601, because of lots of false positives on misconfigured MTAs)
* disconnected before auth was ready
* client didn't finish SASL auth
7 years ago
Serg G. Brester
a287d0a05c
Merge pull request #1872 from kmzby/master
...
Added filter for phpMyAdmin+syslog
7 years ago
Serg G. Brester
569283063b
Merge pull request #1874 from sebres/fix-f2b-setup
...
setup.py: fix several setup facilities
7 years ago
Pavel Mihadyuk
4c1abe1cbf
phpmyadmin-syslog: removed excess file, fixed test, updated failregex
7 years ago
sebres
f451cf34b3
don't check return code by dry-run: returns 256 on some python/setuptool versions.
7 years ago
sebres
e3b061e94b
- `files/fail2ban.service` renamed as template to `files/fail2ban.service.in`;
...
- setup process generates `build/fail2ban.service` from `files/fail2ban.service.in` using distribution related bin-path;
- bug-fixing by running setup with option `--dry-run` (note: specify option `--dry-run` before `install`, like `python setup.py --dry-run install`);
- test cases extended to cover dry-run.
7 years ago
Pavel Mihadyuk
d09304b897
phpmyadmin-syslog: added default jail config
7 years ago
Pavel Mihadyuk
41994fcb56
Added filter for phpMyAdmin+syslog (>=4.7.0)
7 years ago
Pavel Mihadyuk
5b4bc2aafd
Added filter for phpMyAdmin+syslog (>=4.7.0). Closes #1713
7 years ago
sebres
b80692f602
Merge branch '0.10' into 0.11
7 years ago
sebres
1d5fbb95ae
Merge remote-tracking branch 'remotes/gh-upstream/master' into 0.10
7 years ago
Serg G. Brester
124e5587c6
Merge pull request #1869 from sebres/fix-gh-1389
...
action.d/bsd-ipfw.conf: replace not posix-compliant grep option
7 years ago
Serg G. Brester
b0e5efb631
bsd-ipfw.conf: sh-compliant redirect of stderr together with stdout
7 years ago
sebres
3be32adefb
Replace not posix-compliant grep option: fgrep with `-q` option can cause 141 exit code in some cases (see gh-1389).
7 years ago
sebres
9dc9477e71
Merge branch '0.10' into 0.11 (pull request gh-1868)
7 years ago
sebres
8e6b4346dc
avoid using "ANSI_X3.4-1968" as preferred encoding, if missing environment variables 'LANGUAGE', 'LC_ALL', 'LC_CTYPE', and 'LANG'
...
(especially critical if default value `encoding = auto` configured).
As PoC and coverage (this case fails without this "fix"):
$ env -i PATH="$PATH" bin/fail2ban-testcases --fast --no-network testAddBanInvalidEncoded
7 years ago
sebres
eca63ab32a
No functional changes, just merge point for "PR #1867 cherry picked into 0.10".
7 years ago
Jacques Distler
f84e58e769
Tweaks to action.d/pf.conf
...
Document recent changes.
Add an option to customize the pf block rule (surely, what the user
really wants, here, is "block quick").
7 years ago
Serg G. Brester
579d2477f5
Merge pull request #1867 from distler/0.11
...
Tweaks to action.d/pf.conf: introduced parameter `block` with default `block quick`
7 years ago
Jacques Distler
d646d06e91
Tweaks to action.d/pf.conf
...
Document recent changes.
Add an option to customize the pf block rule (surely, what the user
really wants, here, is "block quick").
7 years ago
sebres
fdcd847f4a
Merge branch '0.10' into 0.11
7 years ago
sebres
69a6d0e653
amend to 10c0d954017fac270bf1c568e4b02e94d5949b58: order in cymru-info can variate on each level,
...
sorted using key=str (otherwise `['nxdomain', u'US'] != ['US', 'nxdomain']` may occur on some python versions).
7 years ago
sebres
870a33247b
Merge branch '0.10' into 0.11
7 years ago
sebres
a3c6bb601d
Fixes version, causes "UserWarning: Normalizing '0.10.1dev1' to '0.10.1.dev1'" during setup-process.
7 years ago
sebres
72bd666797
Fixes representation of IPAddr (likely the string representation, enclosed in single-quotes).
7 years ago
sebres
10c0d95401
prevent sporadic assert errors on nested lists/dict differ at some level (mostly causes on python 3.4 because of different dict hashing);
...
introduces new test assertion routine `asesertSortedEqual` for comparison regardless elements order (regarding level/nestedOnly arguments).
7 years ago
sebres
aa140f0fa7
Merge branch 0.10 to 0.11, restores merge-point after rebased PR gh-1866 (mistakenly created and merged on 0.11th base);
7 years ago
sebres
33874d6e53
action.d/pf.conf: anchored call arguments combined as `<pfctl>` parameter;
...
test cases fixed;
7 years ago
Alexander Köppe
f6ccede2f1
Update pf.conf fixing #1863
...
Fix #1863
Introduce own PF anchors for fail2ban rules.
7 years ago
Serg G. Brester
7c01a9c7b9
Merge pull request #1866 from koeppea/patch-1
...
Update pf.conf fixing #1863 : erroneous flush of all rulesets, also not created with fail2ban.
7 years ago
sebres
19e59fff3e
ChangeLog: added incompatibility list (compared to v.0.9)
7 years ago
sebres
08646bc339
Always supply jail name as name parameter (if not specified explicit in the action parameters `action[name=...]`).
...
Avoid usage of the same chains (etc.) if someone use `action` instead of `banaction` jail parameter.
7 years ago
sebres
3f83b22de2
action.d/pf.conf: anchored call arguments combined as `<pfctl>` parameter;
...
test cases fixed;
7 years ago
sebres
e5169d8f84
pyinotify: be sure possible IOError/OSError by remove monitor (log-rotate? normally not raises) are handled properly.
7 years ago