Daniel Black
cee3414029
PKG: version release
11 years ago
Daniel Black
0601a07961
PKG: include nagios filter/log
11 years ago
Daniel Black
123791c94c
DOC/ENH: update man pages for release
11 years ago
Daniel Black
77fda9498c
ENH: pull asterisk filter change to support syslog from 0.9 branch
11 years ago
Daniel Black
c3a2e8fbac
Merge pull request #644 from hlein/master
...
ENH: Changes to --print-* options and memory use for fail2ban-regex
11 years ago
Hank Leininger
2deb1b71a1
Sanity-check print-all-* vs print-no-* options.
...
Also, fixed a trivial whitespace issue.
11 years ago
Hank Leininger
d4fb48fd14
Add --print-no-{missed,ignored} and restore -all.
...
Realized --print-all-{missed,ignored} aren't meant to be simple on/off,
but are meant to enable printing all lines even when there are more
than 20.
This restores the behavior of --print-all-*, but preserves the
memory-savings when --print-all-* are not specified.
Also adds --print-no-{missed,ignored} which can be used to suppress
printing of a line type entirely.
11 years ago
Hank Leininger
aa7af6f9c2
Only remember log lines we need to print later.
...
When testing proccessing a large logfile (430 MB, 2M lines) without
--print-all-missed or --print-all-ignored, fail2ban-regex consumes
just over 2 GB of RAM before completing. Even though it does not need
to retain any of the missed or ignored log lines, it does anyway.
With this patch, memory use never grows beyond about 11 MB (unless
--print-all-* are enabled).
11 years ago
Hank Leininger
27dafea281
Fix the --print-all-{missed,ignored} options.
...
Previously, fail2ban-regex always printed both regardless of whether
those options were present or not.
This commit duplicates the patch I submitted at
https://sourceforge.net/p/fail2ban/patches/25/
11 years ago
Daniel Black
415f187644
ENH: sendmail-reject for all smtp ports.
11 years ago
Daniel Black
11fc7941f5
Merge pull request #633 from grooverdan/sendmail
...
MRG: Sendmail filter
11 years ago
Daniel Black
853bed8e4f
ENH: more sendmail-reject filter items thanks to fab23
11 years ago
Daniel Black
d0ec09a3b5
BF: move to right location
11 years ago
Daniel Black
c10cc20928
ENH: rename sendmail-spam to sendmail-reject
11 years ago
Daniel Black
d34569fb8d
BF: email address as arg1 in sendmail filters
11 years ago
Daniel Black
72c84fe9b0
ENH: wider regex for RBL and sendmail-spam
11 years ago
Steven Hiscocks
75599fc7a0
DOC: Add reference to action argument values which contain ","
...
Closes gh-632
11 years ago
Steven Hiscocks
9b877928db
Merge pull request #631 from grooverdan/sendmail
...
ENH: add filter for sendmail-{auth,spam}. Closes gh-20
11 years ago
Daniel Black
fe1725c603
BF: add jail.conf definitions for sendmail* filters
11 years ago
Daniel Black
3d776afbb0
ENH: add filter for sendmail-{auth,spam}. Closes gh-20
11 years ago
Daniel Black
9be22a96a6
Merge pull request #614 from kwirk/complain-abusix
...
BF: Use abusix Abuse Contact DB to get more accurate abuse addresses
11 years ago
Daniel Black
a90be951e9
Merge pull request #624 from kwirk/ignoreip-netmask
...
ENH: Allow 255.255.255.0 style mask for ignoreip
11 years ago
Steven Hiscocks
9928f1df96
ENH: Allow 255.255.255.0 style mask for ignoreip
11 years ago
Steven Hiscocks
997729e274
BF: Fix complain action for multiple recipients and misplaced ";"
11 years ago
Daniel Black
350d2dfd8e
Merge pull request #618 from kwirk/xt_recent-tweaks
...
ENH: Add root user check in xt_recent, and add missing actionstop
11 years ago
Steven Hiscocks
4102f4f8c7
TST: Fix TravisCI build, install of coveralls from pip
11 years ago
Steven Hiscocks
7c76f7f204
BF: $EUID not avilable in all shells, replaced with `id -u` in xt_recent
11 years ago
Steven Hiscocks
2a37ee2fb7
ENH: Add root user check in xt_recent, and add missing actionstop
...
Thanks to Helmut Grohne on IRC for suggestion
11 years ago
Steven Hiscocks
31f4ea59cb
BF: Use abusix Abuse Contact DB to get more accurate abuse addresses
...
Taken from xarf-login-attack action from 0.9 branch by Daniel Black
11 years ago
Steven Hiscocks
9bfc77c320
BF: fail2ban-client processCmd ret was being overwritten each loop
11 years ago
Steven Hiscocks
1e9910fcb0
ENH: Added traceback for error log on pyinotify callback when in debug
...
Thanks to Helmut Grohne for idea on #fail2ban IRC
11 years ago
Steven Hiscocks
bda9b7d725
BF: Add handling of exception in pyinotify callback
...
If error isn't handled, no error messages are printed and the jail
ceases to function.
11 years ago
Daniel Black
fb557761e4
Merge pull request #610 from tecnocat/patch-1
...
BF: Duplicate jail "php-url-fopen"
11 years ago
Aarón Nieves Fernández
993b7d3dfb
Duplicate jail "php-url-fopen"
11 years ago
Steven Hiscocks
3cbfe9b057
BF: `ret` now changed after beautifier called
11 years ago
Yaroslav Halchenko
c424e4032d
DOC: minor - replace tabs with spaces for consistent formatting
11 years ago
Daniel Black
1c740636e3
Merge pull request #603 from truxoft/master
...
ENH: Nagios filter
11 years ago
Ivo Truxa
c207ad6058
removing ignoreip at [nagios]
...
I removed the ignoreip setting from the nagios section. As pointed out, it is redundant here. Nagios server, under normal circumstances should not trigger any access errors, and would be included in the global ignoreips anyway.
11 years ago
Ivo Truxa
f5f434f846
removing the second failregex
...
The second failregex was supposed to catch an error concerning an ACL denial over IPv6, but this message is no more generated by the nrpe version (v2.15) that introduced the IPv6 support, so the first failregex seems to be sufficient.
11 years ago
Daniel Black
338d40f717
Merge pull request #606 from cmarkle/patch-1
...
Correct spelling error in changelog
11 years ago
Chris Markle
20886288e5
Correct spelling error in changelog
...
I know it's a nit but still... ;)
11 years ago
Ivo Truxa
f6ccd8878d
date fix
...
sorry, need to get some glasses
11 years ago
Ivo Truxa
a71bb89ccd
removing a dot (typo)
...
The dot at the ignoregex did not belong there. Somehow it was added during the copying and pasting. Thanks for reporting it, I did not see it. Otherwise, empty ignoregexes are in all filters, and if they are missing, fail2ban client shows warnings when starting the filter, which I prefer avoiding.
11 years ago
Ivo Truxa
a8a43e8f38
ENH: Nagios filter
...
new filter Nagios added
11 years ago
Ivo Truxa
dac4dd465e
ENH: Nagios filter
...
added typical configuration settings for the nagios filter
11 years ago
Ivo Truxa
c91fda8619
ENH: Nagios filter
...
Sample log for the first failregex is available in the testcases. No example available for the IPv6 denial yet.
11 years ago
Ivo Truxa
110b8e6905
ENH: Nagios filter
...
Sample log entry from /var/log/messages for a denied access to the nrpe2 (Nagios Remote Plugin Executor) daemon
11 years ago
Daniel Black
1366ea382d
Merge pull request #601 from grooverdan/dovecot-no-lip-tls
...
ENH: dovecot filter enhancements / BF: remove "no auth attempts"
11 years ago
Daniel Black
273b2f45a3
MRG: remove the "no auth attempts" as per aseques gh-600
11 years ago
Daniel Black
9b614ce486
ENH: dovecot filter enhancements
11 years ago