3838 Commits (ce540554c59d6b475b1e37695f30a1482b301544)

 

All Branches   

Search

Author	SHA1	Message	Date
Yaroslav Halchenko	705b91e6a7	DOC: adjusted ISSUE_TEMPLATE.md picking on @sebres's version	9 years ago
Yaroslav Halchenko	9667c4cb42	ENH: github templates for issues and PRs	9 years ago
Yaroslav Halchenko	72638975a9	ENH: add codecov support to travis.yml and bandge to README.md	9 years ago
Jack Suter	fb779a78c5	gentoo-initd: Use start-stop-daemon in order to handle crashes better ... Currently, if fail2ban is killed (or crashes), its status will be reported by '/etc/init.d/fail2ban status' as 'running' even though it is not. Attempting to restart the service also fails, because Gentoo unsuccessfully tries to stop the service. By using start-stop-daemon and providing a pidfile, Gentoo will instead report the status as 'crashed' and allow the service to be restarted as normal.	9 years ago
Yaroslav Halchenko	905c87ca4a	Merge pull request #1310 from yarikoptic/pr-1288 ... NF: HAProxy HTTP Auth filter	9 years ago
Yaroslav Halchenko	3dc57af19c	Merge branch 'logrotate' of https://github.com/sbraz/fail2ban ... * 'logrotate' of https://github.com/sbraz/fail2ban: Remove compression and count from logrotate	9 years ago
Yaroslav Halchenko	09bc2e978d	Merge pull request #1319 from sebres/asterisk-gh1309 ... Asterisk regexp fix to catch phone # and relax trailing anchoring (replacement for Update asterisk.conf gh-1309)	9 years ago
sebres	d8e81eb417	regexp rewritten (few vulnerable as previous) + test case added	9 years ago
3eBoP	257b7049d8	Update asterisk filter: changed regex for "Call from ...". Sometimes extension can have a plus symbol (+) because they can be phone number. ... Closes #1309	9 years ago
Pierre GINDRAUD	b5a07741c8	Add new regex into postfix filter. The new regexp is able to detect bad formatted SMTP EHLO command	9 years ago
Yaroslav Halchenko	b435e1e4c8	Merge pull request #1311 from sbraz/gentoo-init ... gentoo-initd: do not hide useful output	9 years ago
Louis Sautier	869d99dd37	Remove compression and count from logrotate ... Initially reported at https://bugs.gentoo.org/show_bug.cgi?id=549856	9 years ago
Louis Sautier	294a7790a9	gentoo-initd: do not hide useful output ... Gentoo applies a patch for this: https://bugs.gentoo.org/show_bug.cgi?id=536320	9 years ago
Yaroslav Halchenko	3f437b32db	Merge remote-tracking branch 'pr/1288/head' ... * pr/1288/head: Update haproxy-http-auth.conf Added HAProxy HTTP Auth filter Conflicts: config/jail.conf - resolved + removed unnecessary filter/enabled (defaults should be as good)	9 years ago
Yaroslav Halchenko	377ea32441	Merge pull request #1295 from obounaim/master ... The sender option is ignored by some actions	9 years ago
Serg G. Brester	fe14c8fa05	Merge pull request #1292 from albel727/master ... Add nftables actions	9 years ago
Jordan Moeser	d7b46509d8	Update haproxy-http-auth.conf ... Updated failregex to be more strict	9 years ago
local	58a8736e0f	Updating changelog.	9 years ago
local	40c0bed82c	action_mw, action_mwl, action_cf_mwl ignore the "sender" option when sending a notification email. ... This commit adds "sender="%(sender)s"" to the three actions to correct this issue.	9 years ago
Yaroslav Halchenko	5d0d96a5cb	Merge pull request #1286 from yarikoptic/enh-jail ... ENH: harmonize jail.conf + 1 more test that passed bantime is non-degenerate and int	9 years ago
Alexander Belykh	985e8938a4	Refactor nftables actionstop into smaller parts	9 years ago
Alexander Belykh	9779eeb986	Add nftables_type/family/table parameters	9 years ago
Alexander Belykh	260c30535d	Escape curly braces in nftables actions	9 years ago
Alexander Belykh	1983e15580	Add empty line between parameters in nftables-common.conf	9 years ago
Alexander Belykh	cb2d70d7a8	Add ChangeLog entry for new nftables actions	9 years ago
Alexander Belykh	f7f91a8bd4	Refactor common code out of nftables-multiport/allports.conf	9 years ago
sebres	25a09352e4	+ ChangeLog entry	9 years ago
sebres	69f5623f83	code simplifying (remove duplication): agent will be always supplied as parameter from jail.conf	9 years ago
Alexander Belykh	618e97bce8	Add nftables actions	9 years ago
sebres	ac31121432	amend to fix fail2ban-version: correct user-agent for badips.py "Fail2Ban/ver", changeable within jail/config now;	9 years ago
Jordan Moeser	e133762a28	Added HAProxy HTTP Auth filter	9 years ago
sebres	cf334421bd	Provides fail2ban version to jail (as interpolation variable during parse of jail.conf); ... BF: use `fail2ban_agent` as user-agent in actions badips, blocklist_de, etc. (closes #1271, closes #1272)	9 years ago
Yaroslav Halchenko	b76aede40d	ENH(TST): verify that passed bantime is non-0 and int	9 years ago
Yaroslav Halchenko	28c9832293	RF: harmonize jail.conf (no explicit enabled=false in jails, match filter name for screesharingd, etc)	9 years ago
Yaroslav Halchenko	69aa1feac0	Merge "Mac OS Screen Sharing filter" PR 1232 ... * pr/1232/head: removed system.log Removed old svn revision comment removed false matches Removed includes comment for screensharing jail Now using a literal logpath for screensharing jail Fixed blatant typo in regex clarified comments on sample log format Fixed name (again?) Made screensharing jail off by default Changed regex prequel added entry for new screensharingd filter name change & new sample data Added json metadata Sample log for test case Replaced .* with literal Update jail.conf Added new path variable for system.log Added in settings for screensharingd filter Created file Conflicts: ChangeLog - moved to New Features config/jail.conf - kept at the end	9 years ago
Yaroslav Halchenko	16710237e3	Merge remote-tracking branch 'origin/master' ... * origin/master: Add 'Sender address rejected: Domain not found' Postfix failregex	9 years ago
sebres	134c33cc6d	fail2ban-testcases: added option "--ignore": negate [regexps] filter, to ignore tests matched specified regexps	9 years ago
sebres	8eca2ecd84	optimized version of "str2seconds" with pre-compiled regexp;	9 years ago
sebres	da51fbf9c6	code review and performance optimization: ... - default date templates cache + regexp compiling on the fly (if required); - better usage of shared config over all test cases; - obsolete test cases removed (simple test of memleak/gc); - skip some slow test cases in fast mode (setup test, etc.);	9 years ago
sebres	3f2b58e973	datedetector: matchTime, template list etc. rewritten because of performance degradation (without sorting templates now) - in-place reordering using hits and last used time; ... todo: rewrite "reGroupDictStrptime" because may be too slow;	9 years ago
sebres	e065941ac5	use "maxEntries" (currently 50 as default) as range for max number of the last matches/failures, fail2ban will hold per IP in the list of failures in failmanager resp. in the database; ... prevents out of memory situation if many IP's makes extremely many failures (or very large files since last fail2ban run); closes gh-1277 todo: parameter `maxentries` should be configurable (jail.conf resp. fail2ban.conf); todo: adjust ban-time-incr branch by merge (table "bips").	9 years ago
sebres	935d79eaae	1) prevents a bug by logging stdout/stderr if retcode still None: ... ``` in executeCmd if retcode < 0: TypeError: unorderable types: NoneType() < int() ``` 2) prevents a rarely test case bug of testExecuteTimeoutWithNastyChildren, because no stdout (Resource temporarily unavailable), possible no flush by IO of the killing process;	9 years ago
sebres	6406f6f560	background servicing (temporally executed from failmanager): prevents memory leak on some platforms/python versions, using forced GC in periodic intervals (latency and threshold); ... Side effect: GC is disabled now inside fail2ban-server (to avoid multiple garbage collect)	9 years ago
sebres	a10eb39bbe	test cases extended with memory leakage check	9 years ago
sebres	f7cc55103c	optimized FailManager: increase performance, try to prevent memory leakage (don't copy failures resp. it list on some operations)	9 years ago
sebres	f143ae479c	code and config review after rebase to current master	9 years ago
sebres	72f29e9061	asyncserver (asyncore) code fixed and test cases repaired (always delete temp files, wait for end of thread/server, etc) ... definitely closes gh-161, also other usage of asyncore event loop (in test_smtp.py) repair cache in ipToName (can returns None), precaching of invalid IPs (according to RFC 5737) to stop endless wait for resolving it in test cases.	9 years ago
sebres	770c219ab6	SetupTest should run at version of python currently installed (resp. active one), skip if started with another version.	9 years ago
sebres	cf3cf27fa3	- filtering of test cases extended for method additionally to class (matches method only not whole class for regexp matched method name); ... - new options for "fail2ban-testcases" introduced: "-g" or "--no-gamin" and "-m" or "--memory-db", both are true also if "-f" or "--fast" specified, for example: `fail2ban-testcases -ngm` will runs faster (because no network, no gamin, memory database) but will use the same default sleep intervals as in production (in comparison to -nf); - seekToTime rewritten, accuracy increased by seekToTime, extended for all FileFilter (PyInotify, Gamin also), test cases extended etc. - common performance optimized and code reviewed;	9 years ago
sebres	6faffe3201	test cases extended, code review (+ python 3.x compatibility); ... database test cases extended - enable deleted (disabled) jail in addJail;	9 years ago