Yaroslav Halchenko
cf6b30a668
Use anchored failregex for filters to avoid possible DoS -- lighttpd-fastcgi
2014-06-22 13:03:17 -04:00
Yaroslav Halchenko
5c7fc69f5c
Use anchored failregex for filters to avoid possible DoS -- exim.conf
2014-06-22 12:58:29 -04:00
Yaroslav Halchenko
369fb55c6d
Use anchored failregex for filters to avoid possible DoS -- couriersmtp.conf
2014-06-22 12:00:41 -04:00
Yaroslav Halchenko
ed0ac76b0d
Use anchored failregex for filters to avoid possible DoS -- cyrus-imap
2014-06-22 11:57:45 -04:00
Yaroslav Halchenko
aff0f8233f
Use anchored failregex for filters to avoid possible DoS -- postfix.conf
...
Manually picked up from the 0.8 branch limiting lines only to the existing failregex
2014-06-22 11:50:16 -04:00
Yaroslav Halchenko
264e7813d9
Prepare 0.8.6-3wheezy2 wheezy-security update
2013-06-12 14:31:09 -04:00
Yaroslav Halchenko
684bf81557
Folding debian/patches into .diff.gz since we are still at 1.0 pkg source format in wheezy
2012-12-24 12:44:24 -05:00
Yaroslav Halchenko
1eb6f9d0aa
Adjusting gbp.conf for building out of this release branch
2012-12-17 13:32:07 -05:00
Yaroslav Halchenko
9b85c6ec4e
CVE-2012-5642: Escape the content of <matches> since its value could contain arbitrary symbols ( Closes : #696184 )
2012-12-17 13:30:52 -05:00
Yaroslav Halchenko
826f53f92d
adjusted changelog
2012-02-10 08:20:10 -05:00
Yaroslav Halchenko
7154b3aefd
Since we are exiting with non-0 -- all msgs should be failures
2012-02-09 13:03:53 -05:00
Yaroslav Halchenko
f0da12e58b
Merge pull request #36 from glennaaldering/patch-3
...
Provide informative exit codes upon exit of status.
Debian policy is not specifying any and status command is optional, but LSB http://refspecs.linuxbase.org/LSB_3.1.1/LSB-Core-generic/LSB-Core-generic/iniscrptact.html does provide the desired ones
2012-02-09 09:48:33 -08:00
Glenn Aaldering
5cac32e038
Making sure that the status command gives the correct exit code when fail2ban is not running.
2012-02-09 18:33:14 +01:00
Yaroslav Halchenko
b25dddff31
Added dovecot section to Debian's jail.conf. Thanks to Laurent Léonard ( Closes : #655182 )
2012-01-08 21:47:18 -05:00
Yaroslav Halchenko
088aa67381
DOC: finalizing changelog
2012-01-07 19:46:42 -05:00
Yaroslav Halchenko
84e30ff73a
DOC: a bit extended and reordered run-rootless.txt
2012-01-07 19:43:15 -05:00
Yaroslav Halchenko
1be14b8470
FIX: added blank build-{arch,indep} to pacify lintian
2012-01-07 18:56:07 -05:00
Yaroslav Halchenko
5701ecb681
FIX: reversed Vcs- fields
2012-01-07 18:54:34 -05:00
Yaroslav Halchenko
2828ad4968
FIX: we are using debian not debian-release branch now
2012-01-07 18:53:13 -05:00
Yaroslav Halchenko
055c3e9323
changelog for xt changes
2012-01-07 15:33:20 -05:00
Yaroslav Halchenko
5c2abe60a1
Added pure-ftpd section to Debian's jail.conf. Thanks to Laurent Léonard ( Closes : #654412 )
2012-01-05 23:01:11 -05:00
Zbigniew Jędrzejewski-Szmek
5a82e41285
Merge branch 'xt_recent-echo' into debian
2012-01-06 00:55:04 +01:00
Zbigniew Jędrzejewski-Szmek
bc82a68481
DOC: add documentation for xt_recent-echo without root
2012-01-06 00:55:04 +01:00
Zbigniew Jędrzejewski-Szmek
321670487e
NF: xt_recent-echo action
...
The default configuration can only be run by root. To actually support
running as a different user, the setup action must be disabled.
2012-01-06 00:51:03 +01:00
Zbigniew Jędrzejewski-Szmek
de502cf2e4
NF: run as different user (disabled by default)
2012-01-06 00:36:50 +01:00
Yaroslav Halchenko
aa4f5cf2b7
BF: adjusted vcs- fields to point to github upstream repo
2011-11-29 09:00:29 -05:00
Yaroslav Halchenko
e5ea44b999
Adjusted debian/watch to fetch tarballs from github
2011-11-28 23:01:32 -05:00
Yaroslav Halchenko
a27bff08e5
[ 1efe1bc
] Fresh upstream release ( Closes : #648324 ) + boost policy to 3.9.2
2011-11-28 22:54:36 -05:00
Yaroslav Halchenko
2fd8be18e5
Merge commit '0.8.6' into debian
...
* commit '0.8.6':
Changelog and version changes for 0.8.6
Revert "ENH: server.py -- addLogPath with tail=True"
DOC: updated contact information to direct to github and mailing list
ENH: added custom timeformat with '.' as separator. Close gh-1
BF: stop all communications before stopping the jails (Close gh-7)
ENH: added logging while stopping the jails
Add Date: header for sendmail*.conf actions
BF: gentoo-initd assure /var/run dir + remove stale sock file
ENH: fix of syntax for compatibility with Python 2.4
ENH: stay compatible with python < 2.5 (use md5 if hashlib is N/A)
BF: use hashlib instead of deprecated md5
ENH: Remove obsolete code from gentoo init script. Bug gentoo#367819.
2011-11-28 22:47:27 -05:00
Yaroslav Halchenko
1efe1bc171
Changelog and version changes for 0.8.6
2011-11-28 22:46:04 -05:00
Yaroslav Halchenko
3e1983a8ec
Revert "ENH: server.py -- addLogPath with tail=True"
...
This reverts commit 927a01a076
.
Let's not change this behavior for now from previous release since it
would break finding recent hits upon restart.
2011-11-28 22:22:16 -05:00
Yaroslav Halchenko
2cb14c50ac
DOC: updated contact information to direct to github and mailing list
2011-11-28 21:39:41 -05:00
Yaroslav Halchenko
db39c7438a
ENH: added custom timeformat with '.' as separator. Close gh-1
...
Probably evening effect -- can't understand why reported days of the weeks
differ and it was 1 originally at all. Left as TODO
2011-11-21 20:01:15 -05:00
Yaroslav Halchenko
16322440ed
BF: stop all communications before stopping the jails (Close gh-7)
...
It is necessary because otherwise if jails actions try to communicate
to the server we are getting a lockup since threads are locked
2011-11-21 19:36:52 -05:00
Yaroslav Halchenko
fbce415622
ENH: added logging while stopping the jails
2011-11-21 19:35:14 -05:00
Tom Hendrikx
9fa54cf233
Add Date: header for sendmail*.conf actions
...
According to rfc2822, Date: headers are not optional.
Added these to all sendmail action templates, format specification
should conform to rfc and be portable across multiple platforms.
2011-11-18 16:52:44 -05:00
Michael Lorant
c48c2b19a0
BF: gentoo-initd assure /var/run dir + remove stale sock file
...
Gentoo Bug #347477
Picked up from
http://sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo-x86/net-analyzer/fail2ban/files/gentoo-initd_create_run_dir.patch?view=markup
2011-11-18 14:51:08 -05:00
Yaroslav Halchenko
eda7efbca3
ENH: fix of syntax for compatibility with Python 2.4
2011-11-18 14:47:55 -05:00
Yaroslav Halchenko
bd658fc74b
ENH: stay compatible with python < 2.5 (use md5 if hashlib is N/A)
2011-11-18 14:38:24 -05:00
Markos Chandras
492d8e5ff8
BF: use hashlib instead of deprecated md5
...
Bugfix revision. Fixes bug 260337,283629,301139,315073,343955. Thanks to Robert Trace <bugzilla-gentoo@farcaster.org>, Harley Peters <harley@thepetersclan.com> for the patches.
Picked up from
http://sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo-x86/net-analyzer/fail2ban/files/fail2ban-0.8.4-hashlib.patch\?view\=markup
2011-11-18 14:32:37 -05:00
Robert Trace
5812abb987
ENH: Remove obsolete code from gentoo init script. Bug gentoo#367819.
...
Picked up from
http://sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo-x86/net-analyzer/fail2ban/files/fail2ban-0.8.4-gentoo-init.patch\?view\=markup
2011-11-18 14:28:23 -05:00
Yaroslav Halchenko
9faeecc67c
Merge branch 'master' into debian-release
...
* master:
moving log samples under testcases/files
2011-11-18 11:59:21 -05:00
Yaroslav Halchenko
40fbb55044
Merge branch 'master' (early part) into debian-release
...
* 'master' (early part):
Adding log samples accumulated in Debian branch
BF: removing minor bashism in ipmasq example file (closes : #530078 ). Thanks Raphael Geissert
Added ipmasq rule file to restart fail2ban when iptables are wiped out (closes : #461417 ). Thanks Guido Bozzetto
added rudimentary .gitignore
BF: be able to detect time for VNC recording only 2 letters of year (closes : #537610 )
2011-11-18 11:59:08 -05:00
Yaroslav Halchenko
fceff2d5b9
moving log samples under testcases/files
2011-11-18 11:57:20 -05:00
Yaroslav Halchenko
b9a6b622cc
Adding log samples accumulated in Debian branch
2011-11-18 11:55:46 -05:00
Yaroslav Halchenko
aa0024db00
BF: removing minor bashism in ipmasq example file ( closes : #530078 ). Thanks Raphael Geissert
2011-11-18 11:51:59 -05:00
Yaroslav Halchenko
713fea6371
Added ipmasq rule file to restart fail2ban when iptables are wiped out ( closes : #461417 ). Thanks Guido Bozzetto
2011-11-18 11:51:59 -05:00
Yaroslav Halchenko
c6ea666ac8
added rudimentary .gitignore
2011-11-18 11:50:49 -05:00
Yaroslav Halchenko
9b96a01d3e
adjusting email for Cyril to be cyril.jaquier@fail2ban.org
2011-11-18 11:49:34 -05:00
Yaroslav Halchenko
42e6653486
RF: moving manpages tune ups into debian patch
...
original commit 3389184f41
2011-11-18 11:43:33 -05:00