Steven Hiscocks
2a3a627322
TST: Add sample for sieve regex
2013-07-18 22:17:14 +01:00
Steven Hiscocks
26b472f70f
ENH: Add ejabberd-auth filter and sample log lines
2013-07-18 21:31:51 +01:00
Yaroslav Halchenko
60aa44f42d
DOC: added a note on commit comments for merges with Conflicts
2013-07-18 14:43:41 -04:00
Daniel Black
fa85be2eea
DOC/TST: fix configuration path for apache-auth test cases
2013-07-18 08:37:05 +10:00
Steven Hiscocks
2b6ecfe56a
TST: More verbose when multiple regexs matched in sample test case
2013-07-17 22:25:27 +01:00
Steven Hiscocks
7c3a2a0223
ENH: Allow setting of date pattern as part of filter config Init section
2013-07-17 21:27:19 +01:00
Steven Hiscocks
614fb8505e
BF: globally make HEAVYDEBUG logging level when importing fail2ban
2013-07-17 21:12:48 +01:00
Steven Hiscocks
674e1d82f4
TST: vsftpd fail data update due to recent date pattern changes
2013-07-17 21:12:16 +01:00
Steven Hiscocks
bf86edb3ae
BF: ISO8601 format now returns time in local time zone
2013-07-17 21:11:29 +01:00
Steven Hiscocks
d661b8c046
BF: Apache regex and sample fail data update due to date pattern changes
2013-07-17 21:09:30 +01:00
Steven Hiscocks
72430e805d
Merge branch 'datepatterns' into datepatterns-dateregex
...
Conflicts:
bin/fail2ban-regex
fail2ban/client/beautifier.py
fail2ban/server/datedetector.py
2013-07-17 21:07:09 +01:00
Daniel Black
03ec7c211b
ENH: could not find a way to trigger filter ^%(_apache_error_client)s authorization failure \(no authenticated user\): \S*\s*$
2013-07-18 00:37:33 +10:00
Daniel Black
8ce9c78474
TST: apache-auth digest logs
2013-07-18 00:36:17 +10:00
Daniel Black
f8b5b3a1ef
ENH: apache-auth - quite a lot of authorization failure messages depending on module. Make a wildcard
2013-07-17 23:31:44 +10:00
Daniel Black
4eca2c0bd5
TST: apache-auth client denied by server configuration
2013-07-17 23:24:19 +10:00
Daniel Black
e0292913eb
ENH/TST: filter, testcase and log entry for apache-auth authorization scheme mod_authz_owner
2013-07-17 23:05:04 +10:00
Daniel Black
40cc336cd5
TST: testcases and logs for apache-auth basic
2013-07-17 22:46:04 +10:00
Steven Hiscocks
05fac65a50
BF: fail2ban-regex multiline regex matches no longer in missed lines
...
Closes #263
Closes #282
2013-07-17 00:08:43 +01:00
Steven Hiscocks
c61ba9f0de
ENH+BF: Allow multi lines regex to be tested with samples test case
...
Multi line regex currently only flags on last line, and other lines must
be labelled as not matched.
TODO: Create extension to fail JSON data to allow tying together of
multiple lines
2013-07-16 23:47:28 +01:00
Steven Hiscocks
774c9ce4fd
BF: setup.py build now includes sample log files for tests
2013-07-16 23:37:44 +01:00
Steven Hiscocks
1eea0dcec8
Merge branch 'master' into 0.9
...
Conflicts:
ChangeLog
bin/fail2ban-regex
bin/fail2ban-testcases
config/jail.conf
fail2ban/server/failregex.py
fail2ban/server/filter.py
fail2ban/tests/files/logs/lighttpd
fail2ban/tests/files/logs/mysqld.log
fail2ban/tests/files/logs/wu-ftpd
fail2ban/tests/filtertestcase.py
fail2ban/tests/utils.py
testcases/files/logs/lighttpd
testcases/files/logs/lighttpd-auth
testcases/files/logs/mysqld-auth
testcases/files/logs/mysqld.log
testcases/files/logs/wu-ftpd
testcases/files/logs/wuftpd
2013-07-16 23:16:22 +01:00
Steven Hiscocks
bf05f2ac95
Merge branch 'filter-failregex-return'
...
Conflicts:
server/filter.py
2013-07-16 21:17:18 +01:00
Steven Hiscocks
ba29f6bef3
DOC: Update doc in reference to changes for sample testcases
2013-07-16 21:11:10 +01:00
Steven Hiscocks
c2bdfefb62
DOC: Comment to fail2ban-regex - flagging lines matched multiple regexs
2013-07-16 20:58:44 +01:00
Yaroslav Halchenko
e4d759ac94
Merge pull request #283 from yarikoptic/master
...
Roundcube failregex -- anchor at the beginning as well + mandate <HOST> to end with alphanumeric
2013-07-16 12:49:25 -07:00
Yaroslav Halchenko
90ec82669c
DOC: changelog entries for preceeding changes
2013-07-16 15:10:41 -04:00
Yaroslav Halchenko
f6a8a04cf3
ENH: roundcube-auth - adopt for current format with trailing error message. thanks @kwirk for the review/feedback
...
I also used non-greedy .*? for the login portion since not sure if space could
be there and trying to minimize possibility of reacting on injected "from
<HOST>" somewhere within the trailing .*
2013-07-16 15:07:32 -04:00
Yaroslav Halchenko
0a02cfe9e8
ENH: <HOST> must end with alphanumeric \w (not a dot or a dash etc)
...
Otherwise <HOST> regexp might swallow period in the sentence right after the address.
I have decided to enforce alphanumeric instead of switching to non-greedy +? ... because
I think it is closer to what we actually want here
2013-07-16 15:03:06 -04:00
Yaroslav Halchenko
8add63c733
ENH: anchor roundcube-auth at the beginning as well
2013-07-16 14:16:23 -04:00
Yaroslav Halchenko
148cbd8d2a
ENH: heavier debugging -- log split date/log line even for no match. Log matching regex upon match
2013-07-16 14:16:23 -04:00
Steven Hiscocks
1a2b6442a0
ENH+BF+TST: Filter now returns reference to failregex and ignoreregex
...
This avoids duplication of code across fail2ban-regex and samples test
cases. This also now more neatly resolves the issue of double counting
date templates matches in fail2ban-regex.
In addition, the samples test cases now also print a warning message
that not all regexs have samples for them, with future plan to change
this to an assertion.
2013-07-15 22:22:13 +01:00
Yaroslav Halchenko
5bd186b854
ENH(minor): fail2ban-regex comment line doesn't have to have a space after leading #
2013-07-15 13:52:42 -04:00
Steven Hiscocks
2c8747cc76
BF: fail2ban-regex date detector template hits count now correct
...
closes #295
2013-07-15 18:40:32 +01:00
Steven Hiscocks
4855cae487
Merge branch 'sample-log-meta-data'
...
Conflicts:
testcases/files/logs/dovecot
2013-07-14 18:29:36 +01:00
Steven Hiscocks
1116f23151
TST: Sample log regex test now warns if no log for a filter
...
Also checks that at least some tests are present
2013-07-14 18:19:16 +01:00
Yaroslav Halchenko
6ee2323fa1
Merge pull request #285 from kwirk/python3-config-unicode
...
BF+DOC: All fail2ban config files are UTF-8 decoded for python3
2013-07-14 07:31:57 -07:00
Yaroslav Halchenko
e562515df7
Merge pull request #292 from grooverdan/solaris-doc
...
DOC: shorten example and provide clarification and spelling fix
2013-07-14 07:13:20 -07:00
Steven Hiscocks
728399c39e
Merge pull request #281 from kwirk/dovecot-filter
...
ENH: dovecot filter additions for session, time value and blank user
2013-07-14 05:18:04 -07:00
Daniel Black
6e4b144164
DOC: fix for README.Solaris. Thanks Steven.
2013-07-14 21:43:14 +10:00
Steven Hiscocks
94376bfbe1
TST: Handle lack of `json` library in python2.5 for samples test case
2013-07-14 11:15:45 +01:00
Daniel Black
ab10664b57
ENH: action.d/hostsdeny to take daemon_list arguement as suggested in README.Solaris
2013-07-14 16:20:21 +10:00
Daniel Black
09850d6ba5
DOC: shorten example and provide clarifcation and spelling fixes
2013-07-14 10:25:06 +10:00
Steven Hiscocks
40f67c64b8
TST: Test sample logs' entries are matched by filter regexs
2013-07-13 23:03:01 +01:00
Steven Hiscocks
606e97683b
BF: jail.conf multiport actions previously using single port iptables
2013-07-12 23:34:04 +01:00
Daniel Black
1bb427cc14
TST: remove dup test log entry
2013-07-12 09:09:24 +10:00
Daniel Black
975999591f
ENH/DOC: more realm mismatch errors. Documented filter design criteria
2013-07-12 07:39:18 +10:00
Daniel Black
bf54db7ce7
ENH: ChangeLog notes for apache-auth enhancements
2013-07-11 23:10:44 +10:00
Daniel Black
10e3be857a
ENH: apache-auth filter added mod_auth_digest message
2013-07-11 23:08:46 +10:00
Daniel Black
384b72a535
ENH: apache-auth filter - client wrong auth
2013-07-11 22:58:36 +10:00
Daniel Black
fce431add8
ENH: add mod_authz_core failures to apache-auth
2013-07-11 22:28:27 +10:00