Commit Graph

3838 Commits (ce540554c59d6b475b1e37695f30a1482b301544)
 

Author SHA1 Message Date
Alexander Koeppe e74047ae49 revert to common config for PF covering multi and allports
9 years ago
Alexander Koeppe 3e1328c83b split PF config files between all- and multi port
9 years ago
sebres c6f63c7263 jailreader: support multiple option groups, syntax `action = act[p1=...][p2=...]` + test case for it
9 years ago
Alexander Koeppe 5e06e8be62 removed shebang and changed mode for fail2banregex.py
9 years ago
sebres 06dcad7650 fixed mixed indentation (spaces through tabs), duplicate code removed
9 years ago
Yaroslav Halchenko d7ff7d18cd RF+ENH: @with_kill_srv fixture to kill_srv in the tests
9 years ago
Yaroslav Halchenko e57321ab1e BF+ENH: import signal used in the code, withtmpdir -> with_tmpdir (more readable)
9 years ago
sebres 6353de8b0f possibility to increase verbosity up to heavy debug (command line parameter `-vvv`)
9 years ago
sebres cb4f9be8b2 the date brackets removed from filters using `__prefix_line`, because `__prefix_line` already contains the date ambit;
9 years ago
sebres de813acf51 extends generic `__prefix_line` with optional brackets for the date ambit (gh-1421), added new parameter `__date_ambit` + test case added;
9 years ago
Alexander Koeppe 975608dfb6 no hardcoded python interpreter path
9 years ago
sebres be3e95b76d Merge branch '0.10-fwcmd-fix-test' into 0.10
9 years ago
sebres 0c44ecfc77 action.d/firewallcmd-ipset.conf: different name of the match set's for IPv4/IPv6, using conditional <ipmset>, analog to the iptables-ipset;
9 years ago
Serg G. Brester 0d0e1853c4 Merge pull request #1424 from TorontoMedia/firewallcmd
9 years ago
Serg G. Brester e0da359a5a Merge pull request #1423 from yarikoptic/0.10
9 years ago
Serg G. Brester d742bc2834 Merge pull request #1422 from sebres/0.10-fix-multi-set
9 years ago
TorontoMedia ffebde68e0 Update firewallcmd-multiport.conf
9 years ago
TorontoMedia 07de83e04a Update firewallcmd-common.conf
9 years ago
TorontoMedia 810d5996b5 Update firewallcmd-rich-logging.conf
9 years ago
TorontoMedia 7e54cee8d6 updated firewallcmd actions
9 years ago
Yaroslav Halchenko 2b6f8737a7 ENH: version Fail2Ban in this branch as 0.10.0 alpha 1
9 years ago
sebres d420148055 database: always explicit convert `ip` to `str`, because may be an IPAddr, that will be unsupported type by bind parameter (as long as we've found any default wrapper handler for sqlite3)
9 years ago
sebres cb280b817f csocket multi-set fix: prevent to convert `list`, `dict`, `set` during transfer (send), this offers a sending of 'multi-set' arrays
9 years ago
sebres e0924e0d1b test case fix (always sort result of `DNSUtils.textToIp`, because order of result from `socket.getaddrinfo` is undefined (system depended)
9 years ago
sebres 3e49522b7a fixes unexpected extra regex-space in generic `__prefix_line` (gh-1405, misleadingly committed in d2a9537568);
9 years ago
Yaroslav Halchenko d6eae28eb5 Merge pull request #1419 from sebres/gh-1417
9 years ago
sebres cce63926ce ChangeLog entry added
9 years ago
sebres a4b8f6e49e [part. cherry-picked from 0.10] invalid recursion check in substituteRecursiveTags: for example action `bsd-ipfw` produced ValueError('properties contain self referencing definitions and cannot be resolved...')
9 years ago
sebres 3d3735706b invalid recursion check in substituteRecursiveTags: for example action `bsd-ipfw` produced ValueError('properties contain self referencing definitions and cannot be resolved...')
9 years ago
Serg G. Brester 1791fd59f2 Merge pull request #1418 from yarikoptic/pr-1415
9 years ago
Yaroslav Halchenko a9c563fed2 Merge pull request #1415 from sebres/0.10-fixes
9 years ago
Yaroslav Halchenko 14c31d8c58 DOC: minor PEP8ing and comments enhancements
9 years ago
sebres ec6032d934 prevent to fail stock configs test case, if any jail custom config does not have own test log-file (perhaps not clean copy)
9 years ago
sebres 4b5b16cd9f allow using of IPv6 address style mask (analog to the IPv4), for example: `2606:28ff::/ffff:ff80::` -> `2606:2880::/25`
9 years ago
sebres 0c2eeee8c7 BF: fail2ban-client can't unserialize IPAddr objects - added IPAddr pickle-handler, that simple wrap IPAddr to the str
9 years ago
sebres 53956501da increase readability and details level by increased verbosity
9 years ago
sebres 060ea085f4 reader bug fix: prevent to silent "load" of not existing jail;
9 years ago
sebres 22576d7150 code review, timeout fix, better tracing (and test coverage) by start of server/client (with or without fork)
9 years ago
sebres 0b4143730d some compatibility fixes (prevent forking of testcase-process, code review), wait 4 server ready, test cases fixed (py2/py3)
9 years ago
sebres 2fcb6358ff several bug fixed: fork in client-server test cases prohibited, all worker threads daemonized (to prevent hanging on exit).
9 years ago
sebres afa1cdc3ae client/server (bin) test cases introduced, ultimate closes #1121, closes #1139
9 years ago
sebres 5a053f4b74 starting of the server (and client/server communication behavior during start and daemonize) completely rewritten:
9 years ago
sebres 556ddaabd7 temporary commit (move client/server from bin)
9 years ago
sebres 4ce240ed40 try to start server in foreground
9 years ago
sebres bdc2d07946 fix suhosin_log in common paths - log files should be separated using "\n":
9 years ago
sebres 9b72522a01 todo fix: not necessary in 0.10 branch
9 years ago
sebres 3df97beaa6 changelog entries from sebres:f2b-perfom-prepare-716 (gh-1346)
9 years ago
sebres c22ba5413d changes from ipv6-support-0.10 after merge
9 years ago
sebres f9ea845595 Merge branch 'ipv6-support-0.10' into 0.10
9 years ago
sebres 23ad50dbaa correct <HOST> expression in failregex (now IPv6 will be really found from filter);
9 years ago