Daniel Black
95f3f38682
MRG: merge ChangeLog and jail.conf
2013-10-30 20:19:41 +11:00
Daniel Black
e3150044fd
BF: fix selinux
...
TST: ignore *common.conf files in test cases as these are included
BF: Remove USER_LOGIN from selinux-ssh as its a duplicate message
ENH: add sample jail.conf
2013-10-30 20:05:49 +11:00
Daniel Black
0f85aef609
Merge pull request #407 from grooverdan/dovecot-jail
...
ENH: Dovecot jail
2013-10-29 15:15:19 -07:00
Daniel Black
7596b96d4f
TST: fix date in test comparison for dovecot
2013-10-30 09:05:09 +11:00
Daniel Black
cde389cadc
ENH: additional tweek to dovecot regex based on http://chrisgilligan.com/portfolio/fail2ban-regex/
2013-10-29 10:15:54 +11:00
Daniel Black
d451c2a231
FIX: vsftp improvements from Rich Mellor on mailing list
2013-10-26 09:51:25 +11:00
Daniel Black
b61fe0f12d
Merge pull request #378 from grooverdan/sasl
...
ENH: filter.d/postfix-sasl - anchor regex at start and rename from filter.d/sasl
2013-10-22 04:51:24 -07:00
Daniel Black
92f9e049ee
TST: rename test log file to match
2013-10-22 22:44:49 +11:00
Daniel Black
445c6e6009
Merge pull request #392 from grooverdan/config_order
...
ENH: order config as jail.conf, jail.d/*.conf, jail.local, jail.d/*.local
2013-10-14 04:25:05 -07:00
Daniel Black
e417a2112c
Merge pull request #386 from grooverdan/qmail
...
ENH: filter.d/qmail - anchor at start. Add another regex
2013-10-14 04:24:32 -07:00
Daniel Black
e227568c3b
Merge pull request #384 from grooverdan/dovecot-325
...
ENH: added to dovecot filter. closes gh-325
2013-10-14 04:23:03 -07:00
Daniel Black
d6d51e352c
ENH: order config as jail.conf, jail.d/*.conf, jail.local, jail.d/*.local. closes gh-388
2013-10-11 00:06:13 +11:00
Daniel Black
351eb5ec8f
ENH: filter.d/qmail - anchor at start. Add another regex for http://www.tjsi.com/rblsmtpd/faq/ patch to rblsmtpd
2013-10-09 16:44:48 +11:00
Daniel Black
2d1bd54439
Merge pull request #379 from grooverdan/webmin
...
ENH: filter.d/webmin anchor at start and use syslog
2013-10-08 20:13:14 -07:00
Daniel Black
d60f470096
ENH: added to dovecot filter. closes gh-325
2013-10-09 10:09:06 +11:00
Daniel Black
bc10c90ffe
ENH: filter.d/vsftpd - disable regex for Pam pre 0.99.2.0
2013-10-05 20:02:30 +10:00
Daniel Black
b64bf3fa7b
ENH: filter.d/webmin anchor at start and use syslog
2013-10-05 19:18:44 +10:00
Daniel Black
caf284d518
DOC: ChangeLog deconflict
2013-10-02 09:11:15 +10:00
Daniel Black
23dd734aa9
Merge pull request #366 from grooverdan/dovecot
...
ENH: dovecot regex to match failure reported by Bob Cohen on mailing lis...
2013-10-01 15:50:39 -07:00
Daniel Black
f998e01590
Merge pull request #359 from grooverdan/pureftpd
...
ENH: Pureftpd syslog prefixing and filter achoring
2013-10-01 15:14:33 -07:00
Daniel Black
ba8183b116
Merge pull request #372 from grooverdan/uw-imap
...
ENH: filter.d/uwimap-auth added. Closes #18
2013-10-01 15:13:11 -07:00
Daniel Black
262616f7a7
ENH: filter.d/uwimap-auth - failure of an admin override to regex
2013-10-01 22:32:57 +10:00
Daniel Black
9211179d30
ENH: filter.d/uwimap-auth - add "disabled" to regex
2013-10-01 22:10:33 +10:00
Daniel Black
4649cf9608
ENH: separate selinux and selinux-ssh
2013-10-01 20:21:45 +10:00
Daniel Black
cbdf4ceedd
TST: test cases for uw-imapd thanks to Internet
2013-10-01 10:21:11 +10:00
Yaroslav Halchenko
fab3772a60
TST: explicitly test date patterns being anchored or not
2013-09-30 20:15:24 -04:00
Daniel Black
a1eaa5f755
ENH: filter.d/selinxu added. Closes #296
2013-10-01 09:59:15 +10:00
Yaroslav Halchenko
c35d2844bd
Merge pull request #371 from grooverdan/ssh-6.3
...
BF: fix regex for openssh-6.3
2013-09-30 16:32:14 -07:00
Yaroslav Halchenko
c7728331c7
Merge pull request #369 from yarikoptic/master
...
Dealing with dangling symlinks -- avoid adding those files to server for monitoring
2013-09-30 16:28:54 -07:00
Steven Hiscocks
a8f2448349
ENH: Allow SE Linux epoch date detection
2013-09-30 20:58:24 +01:00
Daniel Black
b3b62d65bf
ENH: filter.d/uwimap-auth added. Closes #18
2013-09-29 18:06:27 +10:00
Daniel Black
1eeb6e94bd
BF: fix regex for openssh-6.3
2013-09-29 17:28:33 +10:00
Daniel Black
8a458b45bc
TST: dummyjail in own class
2013-09-29 15:57:03 +10:00
Daniel Black
86d3ee5373
TST: py2.5 compatibility - no with
2013-09-29 15:46:15 +10:00
Daniel Black
723ea964a7
TST: failmanager get/sets on FailTotal and MaxTime
2013-09-29 15:12:44 +10:00
Daniel Black
bcc16789d0
TST: test elements of DateTemplate base class
2013-09-29 15:02:38 +10:00
Daniel Black
b576c4718d
TST: add test cases for Actions
2013-09-29 14:52:59 +10:00
Daniel Black
891b436874
TST: more complete Action testing
2013-09-29 14:17:31 +10:00
Yaroslav Halchenko
dcaacad7e3
BF: do not pass dangling symlinks to the server to be monitored
...
This is more of a workaround I guess than a "solution". Ideally server
should be more clever and allow adding symlinks which eventually might
point to existing file. But that is probably would be too much complication
for a rare use case. User on the mailing list informed that then server
does not monitor even other files, thus as a quick workaround -- do not even add dangling links
2013-09-28 22:16:34 -04:00
Yaroslav Halchenko
cf76019cca
TST: that we do receive IOError if trying to feed broken symlink into path to be monitored by server
2013-09-28 21:59:11 -04:00
Daniel Black
4b5ecbccd1
ENH: debuggex URLs with fail2ban-regex
2013-09-22 13:20:17 +10:00
Daniel Black
8c2a5612ed
DOC: resolve ChangeLog conflicts
2013-09-19 19:38:28 +10:00
Daniel Black
3be7dcd701
DOC: resolve ChangeLog conflicts
2013-09-19 19:23:02 +10:00
Daniel Black
89e0520675
ENH: dovecot regex to match failure reported by Bob Cohen on mailing list
2013-09-19 08:25:50 +10:00
Daniel Black
9ce1e33313
TST: pureftpd - everything I've seen suggests that pureftpd only does syslog - even back to 2004. Not sure how this second example came into existance
2013-09-17 22:24:28 +10:00
Daniel Black
ad5fb81f4b
TST: failJSON set match to false on longer supported pam version
2013-09-17 21:18:24 +10:00
Daniel Black
bec723b21d
TST: failJSON date fix
2013-09-17 10:51:48 +10:00
Daniel Black
7e756dfada
TST: correct failJSON for www3.google.com -> www.google.com changes. Disable test case for pre-0.99.2.0 version of linux-pam failure messages
2013-09-17 10:48:09 +10:00
Daniel Black
8f41422262
TST: domains need to exist for fail2ban-regex to work
2013-09-17 10:09:19 +10:00
Daniel Black
ee497ff1cb
ENH: filter mysqld-auth can be a is a syslog based service so anchor it using syslog prefix
2013-09-17 07:57:19 +10:00