Alexander Koeppe
e74047ae49
revert to common config for PF covering multi and allports
9 years ago
Alexander Koeppe
3e1328c83b
split PF config files between all- and multi port
9 years ago
sebres
c6f63c7263
jailreader: support multiple option groups, syntax `action = act[p1=...][p2=...]` + test case for it
...
(see gh-1425, gh-1429)
9 years ago
Alexander Koeppe
5e06e8be62
removed shebang and changed mode for fail2banregex.py
9 years ago
sebres
06dcad7650
fixed mixed indentation (spaces through tabs), duplicate code removed
9 years ago
Yaroslav Halchenko
d7ff7d18cd
RF+ENH: @with_kill_srv fixture to kill_srv in the tests
9 years ago
Yaroslav Halchenko
e57321ab1e
BF+ENH: import signal used in the code, withtmpdir -> with_tmpdir (more readable)
...
case shows how evil except Exception can be ;)
9 years ago
sebres
6353de8b0f
possibility to increase verbosity up to heavy debug (command line parameter `-vvv`)
9 years ago
sebres
cb4f9be8b2
the date brackets removed from filters using `__prefix_line`, because `__prefix_line` already contains the date ambit;
9 years ago
sebres
de813acf51
extends generic `__prefix_line` with optional brackets for the date ambit (gh-1421), added new parameter `__date_ambit` + test case added;
9 years ago
Alexander Koeppe
975608dfb6
no hardcoded python interpreter path
9 years ago
sebres
be3e95b76d
Merge branch '0.10-fwcmd-fix-test' into 0.10
9 years ago
sebres
0c44ecfc77
action.d/firewallcmd-ipset.conf: different name of the match set's for IPv4/IPv6, using conditional <ipmset>, analog to the iptables-ipset;
...
test cases for 3 firewallcmd extended;
9 years ago
Serg G. Brester
0d0e1853c4
Merge pull request #1424 from TorontoMedia/firewallcmd
...
ENH: Branch 0.10 - updated firewallcmd actions
9 years ago
Serg G. Brester
e0da359a5a
Merge pull request #1423 from yarikoptic/0.10
...
ENH: version Fail2Ban in this branch as 0.10.0 alpha 1
9 years ago
Serg G. Brester
d742bc2834
Merge pull request #1422 from sebres/0.10-fix-multi-set
...
0.10 fix multi-set and database binding parameters
9 years ago
TorontoMedia
ffebde68e0
Update firewallcmd-multiport.conf
9 years ago
TorontoMedia
07de83e04a
Update firewallcmd-common.conf
9 years ago
TorontoMedia
810d5996b5
Update firewallcmd-rich-logging.conf
9 years ago
TorontoMedia
7e54cee8d6
updated firewallcmd actions
9 years ago
Yaroslav Halchenko
2b6f8737a7
ENH: version Fail2Ban in this branch as 0.10.0 alpha 1
9 years ago
sebres
d420148055
database: always explicit convert `ip` to `str`, because may be an IPAddr, that will be unsupported type by bind parameter (as long as we've found any default wrapper handler for sqlite3)
9 years ago
sebres
cb280b817f
csocket multi-set fix: prevent to convert `list`, `dict`, `set` during transfer (send), this offers a sending of 'multi-set' arrays
...
(missed by cherry-picking from multi-set branch)
9 years ago
sebres
e0924e0d1b
test case fix (always sort result of `DNSUtils.textToIp`, because order of result from `socket.getaddrinfo` is undefined (system depended)
9 years ago
sebres
3e49522b7a
fixes unexpected extra regex-space in generic `__prefix_line` (gh-1405, misleadingly committed in d2a9537568
);
...
all optional spaces normalized in generic include `common.conf` + test cases are extended (using new example pseudo-filter and test log `zzz-generic-example`);
9 years ago
Yaroslav Halchenko
d6eae28eb5
Merge pull request #1419 from sebres/gh-1417
...
fixes gh-1417 Grave tags substitution bug. [part. cherry-picked from 0.10]
9 years ago
sebres
cce63926ce
ChangeLog entry added
9 years ago
sebres
a4b8f6e49e
[part. cherry-picked from 0.10] invalid recursion check in substituteRecursiveTags: for example action `bsd-ipfw` produced ValueError('properties contain self referencing definitions and cannot be resolved...')
...
test cases extended for exactly this case;
closes gh-1417
9 years ago
sebres
3d3735706b
invalid recursion check in substituteRecursiveTags: for example action `bsd-ipfw` produced ValueError('properties contain self referencing definitions and cannot be resolved...')
...
test cases extended for exactly this case and for all stock actions;
closes gh-1417
9 years ago
Serg G. Brester
1791fd59f2
Merge pull request #1418 from yarikoptic/pr-1415
...
DOC: minor PEP8ing and comments enhancements
9 years ago
Yaroslav Halchenko
a9c563fed2
Merge pull request #1415 from sebres/0.10-fixes
...
0.10 fixes
9 years ago
Yaroslav Halchenko
14c31d8c58
DOC: minor PEP8ing and comments enhancements
9 years ago
sebres
ec6032d934
prevent to fail stock configs test case, if any jail custom config does not have own test log-file (perhaps not clean copy)
9 years ago
sebres
4b5b16cd9f
allow using of IPv6 address style mask (analog to the IPv4), for example: `2606:28ff::/ffff:ff80::` -> `2606:2880::/25`
...
fast calculating of maskplen using map table MAP_ADDR2MASKPLEN, with pre-calculated addr->maskplen values;
test cases extended;
9 years ago
sebres
0c2eeee8c7
BF: fail2ban-client can't unserialize IPAddr objects - added IPAddr pickle-handler, that simple wrap IPAddr to the str
9 years ago
sebres
53956501da
increase readability and details level by increased verbosity
9 years ago
sebres
060ea085f4
reader bug fix: prevent to silent "load" of not existing jail;
...
coverage of test cases increased;
9 years ago
sebres
22576d7150
code review, timeout fix, better tracing (and test coverage) by start of server/client (with or without fork)
9 years ago
sebres
0b4143730d
some compatibility fixes (prevent forking of testcase-process, code review), wait 4 server ready, test cases fixed (py2/py3)
9 years ago
sebres
2fcb6358ff
several bug fixed: fork in client-server test cases prohibited, all worker threads daemonized (to prevent hanging on exit).
9 years ago
sebres
afa1cdc3ae
client/server (bin) test cases introduced, ultimate closes #1121 , closes #1139
...
small code review and fixing of some bugs during client-server communication process (in the test cases);
9 years ago
sebres
5a053f4b74
starting of the server (and client/server communication behavior during start and daemonize) completely rewritten:
...
- client/server functionality moved away from bin and using now the common interface (introduced in fail2bancmdline);
- start in foreground fixed;
- server can act as client corresponding command line;
- command "restart" added: in opposite to "reload" in reality restarts the server (new process);
- several client/server bugs during starting process fixed.
9 years ago
sebres
556ddaabd7
temporary commit (move client/server from bin)
9 years ago
sebres
4ce240ed40
try to start server in foreground
...
# Conflicts:
# fail2ban/server/server.py
9 years ago
sebres
bdc2d07946
fix suhosin_log in common paths - log files should be separated using "\n":
...
prevents to throw an error "File option must be 'head' or 'tail'", if jail suhosin will be enabled.
9 years ago
sebres
9b72522a01
todo fix: not necessary in 0.10 branch
9 years ago
sebres
3df97beaa6
changelog entries from sebres:f2b-perfom-prepare-716 (gh-1346)
9 years ago
sebres
c22ba5413d
changes from ipv6-support-0.10 after merge
9 years ago
sebres
f9ea845595
Merge branch 'ipv6-support-0.10' into 0.10
9 years ago
sebres
23ad50dbaa
correct <HOST> expression in failregex (now IPv6 will be really found from filter);
...
respect standard spelling of IPv6 (with port) enclosed in brackets ([ipv6]:port), to prevent the necessarily changing of many filter definitions, comparison:
#IPv4:
127.0.0.1:55555
#IPv6:
[a🅱️ c:d::1]:55555
some small fixes (in test cases also) and code review and few optimizations;
9 years ago