Yaroslav Halchenko
0e61b7586a
RF: use descriptive loop variable (oldticket) and matching associated variable suffixes (old)
9 years ago
Yaroslav Halchenko
e2a68bb02d
RF: make Jail new style class, avoiding multiple inheritance with object
9 years ago
Yaroslav Halchenko
78eb4d95eb
RF: is_alive -> isAlive to stay consistent in camelCasing
9 years ago
sebres
59bf5013c0
- performance of fail2ban optimized
...
-- cache dnsToIp, ipToName to prevent long wait during retrieving of ip/name for wrong dns or lazy dns-system;
-- instead of simple "sleep" used conditional wait "wait_for", that internal increases sleep interval up to sleeptime;
-- ticket / banmanager / failmanager modules are performance optimized;
-- api of filter (log files), jail, etc. rewritten and extended for performance purposes;
- performance of test cases optimized:
-- added option "--fast" to decrease wait intervals, avoid passive waiting, and skip few very slow test cases;
- code review after partially cherry pick of branch 'ban-time-incr' (see gh-716)
-- ticket module prepared to easy merge with newest version of 'ban-time-incr', now additionally holds banTime, banCount and json-data;
-- executeCmd partially moved from action to new module utils, etc.
-- python 2.6 compatibility;
- testExecuteTimeoutWithNastyChildren: test case repaired - wait for pid file inside bash, kill tree in any case (gh-1155);
- testSocket: test case repaired - wait for server thread starts a socket (listener)
9 years ago
sebres
3540619a73
code review, test case extended;
9 years ago
sebres
d23d103f96
code review and few new test cases
9 years ago
sebres
db5ee0842a
increase code coverage
9 years ago
sebres
d22b2498d4
normalizing time config entries: use time abbreviation (str2seconds) for all time options such 'dbpurgeage', 'bantime', 'findtime', ex.: default '1d' instead '86400';
...
code review and test case extended;
9 years ago
sebres
dad4234beb
The tricky bug fixed - last position of log file will be never retrieved ( #795 ):
...
addJail (executed before addLog) early uses a "INSERT OR REPLACE" statement to update "enabled" to 1 (and add jail the first time used at once), but this syntax in sqlite always deletes an entry (cause of constraint) and inserts it again, so because of CASCADE all log entries with this jail will be also deleted from logs table.
9 years ago
sebres
410f9d7c10
filter, datedetector, datetemplate: performance optimizing of combination datedetector.matchTime/getTime2, because early getTime search a template and call template.matchTime again (so the date parsing was really executed twice, now just once);
...
debug logging optimized;
added info line log "Start Fail2ban ..." after changed logging target;
9 years ago
sebres
42199957d0
prevent completely read of big files first time (after start of service), initial seek to start time using half-interval search algorithm (see issue #795 ):
...
now polling backend only (currently not implemented for gamin and pyinotify backends);
python3/pypy compatibility fix + removing obsolete code
9 years ago
sebres
3cfdc5ecb3
test cases extended;
...
code review
9 years ago
sebres
a3e0cc9830
introduced string to seconds (str2seconds) for configuration entries with time;
...
todo: expands it for all time config entries;
9 years ago
Yaroslav Halchenko
26dd6d7425
Merge pull request #1258 from aleksandrs-ledovskis/feature/postfix-domain-not-found-failregex
...
Add 'Sender address rejected: Domain not found' Postfix failregex
9 years ago
Yaroslav Halchenko
dfaf82d68a
Changelog entry for PartOf in .service fix
9 years ago
Yaroslav Halchenko
9f15d02910
Merge pull request #1251 from fastest963/master
...
Added PartOf to service file so f2b restarts when deps do
9 years ago
Yaroslav Halchenko
edcbdf6eab
Merge pull request #1264 from rbrownwsws/master
...
Added filter and jail for murmur/mumble-server.
9 years ago
Yaroslav Halchenko
39d202b623
Merge pull request #1273 from yarikoptic/enh-log-matchtuple
...
ENH: log at heavydebug level what actually we are matching for failregex
9 years ago
Ross Brown
8d12dba245
Merge remote-tracking branch 'upstream/master'
9 years ago
Ross Brown
16aa2fa13e
Updated ChangeLog to include new murmur jail.
9 years ago
Ross Brown
ead2d509dc
Updated 'murmur' filter to use new double-anchored regex based on @yarikoptic's suggestions.
9 years ago
Yaroslav Halchenko
61b2653f9e
Merge pull request #1274 from yarikoptic/enh-new-sshd-too-many
...
ENH: sshd filter -- match new "maximum auth attempts exceeded"
9 years ago
Ross Brown
fd36b058ce
Changed usernames in sample log file for 'murmur' filter.
9 years ago
Ross Brown
ba535826a8
Updated ChangeLog to include new murmur filter.
9 years ago
Yaroslav Halchenko
5d6cead996
ENH: sshd filter -- match new "maximum auth attempts exceeded" ( Closes #1269 )
9 years ago
Yaroslav Halchenko
9ee08fed48
ENH: log at heavydebug level what actually we are matching for failregex
9 years ago
sebres
6d984717b5
ordered dict replaced with dict + change log entry fix
...
# Conflicts:
# fail2ban/server/filter.py
9 years ago
Yaroslav Halchenko
48202f998d
RF: prefer log over container in getLog and local variables
...
Even though I have left FileContainer class name intact
9 years ago
Yaroslav Halchenko
59da27b9f6
ENH: add a check to testTail to assure correct test logic below it
9 years ago
Yaroslav Halchenko
dd9d1912e8
RF: Filter.getLogPaths -> getLogs
...
Since it returns log containers not paths per se
9 years ago
sebres
6ce7522d3c
unordered (python 2.6) compatibility fix and coverage extended;
9 years ago
sebres
3a179ec5d7
small code review: (much pretty) handling of filename as key - FileFilter contains (ordered) dict of files (not list), as discussed in gh-1265
9 years ago
Ross Brown
4c837f0333
Added sample log file for 'murmur' filter.
9 years ago
Ross Brown
106c3eab9a
Added filter and jail for murmur/mumble-server.
9 years ago
Serg G. Brester
1b0560d2f1
Merge pull request #1262 from sarneaud/gentoo-initd
...
Small fixes for Gentoo initd script
9 years ago
sarneaud
5b88a84fe8
Small fixes for Gentoo initd script
...
These fixes are pretty pedantic, but they do simplify the script a
little.
* Checking the existence of a file/directory before creating/deleting
it adds complexity and raciness. There are better options.
* mkdir -p does the job of making sure a directory exists. (It only
fails if there's a filesystem error or something.)
* Likewise, rm -f doesn't fail if the file doesn't exist.
* rm -r isn't neccessary because the socket shouldn't be a directory.
(If it is for some reason, that should be an error.)
9 years ago
Aleksandrs Ļedovskis
fa59a6850f
Add 'Sender address rejected: Domain not found' Postfix failregex
...
Signed-off-by: Aleksandrs Ļedovskis <aleksandrs@ledovskis.lv>
9 years ago
Yaroslav Halchenko
fe8d585d91
Merge pull request #1225 from opoplawski/journaldefault
...
Add *_backend options for services to allow distros to set the default backend
9 years ago
Orion Poplawski
c656cb0d36
Merge branch 'master' into journaldefault
...
Conflicts:
ChangeLog
9 years ago
James Hartig
9905396eb8
Added PartOf to service file so f2b restarts when deps do
9 years ago
Yaroslav Halchenko
b3ed19b36a
DOC: tune up to jail.conf.5 - some line breaks, typos etc
9 years ago
Yaroslav Halchenko
6af6e40b62
Merge pull request #1241 from sebres/known/param-tag
...
New interpolation feature for definition config readers - `<known/parameter>`
9 years ago
Yaroslav Halchenko
441dffbe2a
ENH: Pruned some "pragma: no cover"s in fail2banregex
...
This code should and can be unit-tested, so no reason to keep it with
no cover
9 years ago
Yaroslav Halchenko
584f3af5af
Merge pull request #1240 from yarikoptic/master
...
ENH: .mailmap file to bring some names together for git shortlog -sn
9 years ago
Yaroslav Halchenko
aa0588dd1a
Merge pull request #1250 from sebres/_sb/fail2ban-regex-coverage
...
RF: fail2ban-regex code moved into client/ codebase, unittested
9 years ago
sebres
689dfa1e6a
debuggexURL fixed for wrong encoded character; test cases extended;
9 years ago
sebres
38f09b417a
fail2ban-regex command line (after fail2ban-regex functionality moved to the client)
9 years ago
sebres
0877d66228
fail2ban-regex moved to the client + test cases for initial coverage added
9 years ago
sebres
46b116e86a
filter test cases improved + log captured inside such tests + python 3.x compatibility;
...
changelog entry;
9 years ago
sebres
a42aa726ab
fixed fail2ban-regex reads invalid character (in sense of given encoding); continuing to process line ignoring invalid characters (still has no test cases).
...
filter test cases added for same issue inside fail2ban-server / fail2ban-testcases;
closes gh-1248
9 years ago