Steven Hiscocks
df8d700d17
RF: Refactor Jail and JailThread
...
Includes:
- documentation to new format and use of properties
- change isActive->is_active as former no longer documented for
python3, and later introduction and documented in python2.6
- status formatter in beautifier somewhat more automatically
formatted; no changes are required for additional status elements
- JailThread now set to active within `start` method, complimenting
`stop` method
11 years ago
Daniel Black
9be22a96a6
Merge pull request #614 from kwirk/complain-abusix
...
BF: Use abusix Abuse Contact DB to get more accurate abuse addresses
11 years ago
Daniel Black
cc463aa60d
Merge pull request #620 from kwirk/xarf-tweaks
...
BF: Fix misplaced ";", and duplicate {ip,}matches
11 years ago
Daniel Black
a044517cb7
MRG: from master to 0.9 2014-02-20
11 years ago
Steven Hiscocks
8c5525163b
BF: Fix misplaced ";", and duplicate {ip,}matches
11 years ago
Steven Hiscocks
997729e274
BF: Fix complain action for multiple recipients and misplaced ";"
11 years ago
Steven Hiscocks
7c76f7f204
BF: $EUID not avilable in all shells, replaced with `id -u` in xt_recent
11 years ago
Steven Hiscocks
2a37ee2fb7
ENH: Add root user check in xt_recent, and add missing actionstop
...
Thanks to Helmut Grohne on IRC for suggestion
11 years ago
Steven Hiscocks
5c7630c4be
ENH: Allow separate blacklist category for badips.py action
11 years ago
Steven Hiscocks
cf81ddd8e2
BF: Add error handling in badips.py action
11 years ago
Steven Hiscocks
31f4ea59cb
BF: Use abusix Abuse Contact DB to get more accurate abuse addresses
...
Taken from xarf-login-attack action from 0.9 branch by Daniel Black
11 years ago
Steven Hiscocks
dff8909473
ENH: Add badips.com reporting and blacklisting action (python based)
11 years ago
Daniel Black
1e1261ccb4
MRG: from master 2014-01-23
11 years ago
Daniel Black
ca57427080
BF: firewallcmd-ipset had non-working actioncheck
11 years ago
Steven Hiscocks
8221c7ca71
TST+BF: Add tests for python actions, including test for smtp.py
...
Also fix bug when specifying multiple recipients for smtp.py action
11 years ago
Daniel Black
a650178bd1
MRG: merge from master 2014-01-19
11 years ago
Daniel Black
f566cab766
Merge branch 'master' into badips
11 years ago
Daniel Black
cd3e94140c
MRG: complete merge
11 years ago
Yaroslav Halchenko
9a8b449086
DOC: some typos, fixes from Vincent Lefevre
11 years ago
Daniel Black
76468942f9
MRG: complete merge from master
11 years ago
Daniel Black
ab3ded2205
Merge pull request #549 from kwirk/python-actions
...
ENH: Python actions
11 years ago
Steven Hiscocks
69a850d226
DOC: Update docstrings for smtp.py action
11 years ago
Steven Hiscocks
6e63f0ea5a
RF: Change Jails and Actions to Mapping types
11 years ago
Daniel Black
3d1a1afca4
MRG: to more recent 0.9
11 years ago
Daniel Black
5fe75436cc
DOC: DEV NOTES before author names
11 years ago
Steven Hiscocks
80d6f74ee8
RF: Refactor actions further, include removing server proxy interface
...
This allows direct setting of action properties and calling of methods
from the fail2ban-client if so required.
11 years ago
Daniel Black
a0c2de3e4d
DOC: document incompatiblity between APF and iptables-* actions. Closes gh-510
11 years ago
Steven Hiscocks
98bf511443
BF: Incorrect number of arguments in smtp.py action connect log
11 years ago
Steven Hiscocks
5b2b59d752
ENH: python actions use initOpts as **kwargs
...
Adds an easy way to handle case where mandatory arguments are missed, or
not valid arguments are passed
11 years ago
Steven Hiscocks
6ef911185d
ENH: Add matches to smtp.py action
11 years ago
Daniel Black
391b5fc883
MRG: from master again 2014-01-01
11 years ago
Steven Hiscocks
f37c90cdba
ENH: Python based actions
...
Python actions are imported from action.d config folder, which have .py
file extension. This imports and creates an instance of the Action class
(Action can be a variable that points to a class of another name).
fail2ban.server.action.ActionBase is a base class which can be inherited
from or as a minimum has a subclass hook which is used to ensure any
imported actions implements the methods required.
All calls to the execAction are also wrapped in a try except such that
any errors won't cripple the jail.
Action is renamed CommandAction, to clearly distinguish it from other
actions.
Include is an example smtp.py python action for sending emails via smtp.
This is work in progress, as looking to add the <matches> and whois
elements, and also SSL/TLS support.
11 years ago
Daniel Black
be382dae4d
MRG: ufw changelog conflicts
11 years ago
Daniel Black
1f6ece2a40
Merge pull request #490 from grooverdan/firewallcmd-ipset
...
ENH: add firewallcmd-ipset
11 years ago
Daniel Black
a1a219189f
Merge pull request #493 from grooverdan/xarf-ipmatch
...
ENH: use ipmatches for action xarf-login-attack
11 years ago
Daniel Black
7c0efc8ec8
MRG: merge so far - flushLogs not working yet
11 years ago
Daniel Black
4eedf9d4e1
ENH: use ipmatches for action xarf-login-attack
11 years ago
Daniel Black
a398c51d6c
ENH: simplify actioncheck on firewallcmd-new a little more
11 years ago
Daniel Black
772def1095
Merge pull request #491 from kwirk/ipmatches
...
ENH: Add <ipmatches> and <ipjailmatches> tags + sendmail implementations
11 years ago
Steven Hiscocks
40007abc1d
ENH: Refactor and add database matches and failures for sendmail actions
11 years ago
Daniel Black
1c6c011154
EHH missed trailing .
11 years ago
Daniel Black
868a4ea470
ENH: full abusix disclaimer in action xarf-login-attack
11 years ago
Daniel Black
9fe0a69852
ENH: add firewallcmd-ipset
11 years ago
Daniel Black
4ffc57e14f
ENH: simplify firewallcmd-new actioncheck and provide output samples
11 years ago
Daniel Black
ed816afbcd
ENH: add badips action
11 years ago
Daniel Black
1ff52dfe4d
DOC: document ufw a bit more. Change insertpos default to 1 to allow it to work if the user run ufw enable
11 years ago
Daniel Black
f35345ecaa
ENH: add ufw action based off Guilhem Lettron's work in lp-#701522. Closes gh-455
11 years ago
Daniel Black
13ccebe78f
BF: fix actioncheck in firewallcmd
11 years ago
Steven Hiscocks
0bcff771b8
ENH: Add <ipmatches> and <ipjailmatches> tags
...
Example use filter also added for sendmail-whois with ipmatches rather
than grepped lines
11 years ago
Daniel Black
f385439a41
MRG: ChangeLog merge
11 years ago
Daniel Black
36917d7517
BF: action.d/complain - match IP at beginning and end of lines
11 years ago
Daniel Black
135c759dbb
Merge pull request #477 from kwirk/blocklist.de
...
ENH: Added blocklist.de reporting API action
11 years ago
Steven Hiscocks
630dd91dcd
BF: Add [Init] section to blocklist.de action
11 years ago
Steven Hiscocks
b3c173795e
ENH: blocklist.de action error on HTTP response code 4xx
11 years ago
Daniel Black
51f2619878
Merge pull request #473 from grooverdan/whois-missing
...
ENH: Whois missing in actions? Include output to say so
11 years ago
Steven Hiscocks
a19b33cc72
ENH: blocklist.de action added fail2ban version as user agent
11 years ago
Steven Hiscocks
f742ed0e4b
DOC: when to use blocklist.de reporting
...
Taken from commit 1846056606
11 years ago
Steven Hiscocks
e810ec009d
ENH: Added blocklist.de reporting API action
11 years ago
Daniel Black
4dc51e5def
BF: put notice in email if whois program could not provide more information. Closes gh-471
11 years ago
Daniel Black
97d7f46bb7
DOC: correct grammar - s/Here are more information/Here is more information/
11 years ago
Daniel Black
8aead9ab79
BF: escape quotes when splitting addresses for xarf
11 years ago
Daniel Black
1846056606
DOC: when to use xarf messages to network owner
11 years ago
Daniel Black
8c37d2e4de
ENH: remove dependency on querycontacts
11 years ago
Daniel Black
dd356c3cef
BF: fixed for sendmail and tested the MTA aspects of this action
11 years ago
Daniel Black
9df5f4eec8
BF: remove debugging tee command on xarf-login-attack
11 years ago
Daniel Black
d015f7f4fc
BF/ENH: fixed so xarf-login-attack works
11 years ago
Daniel Black
0495aa098e
BF: grep matches on <ip> shouldn't include other IPs
11 years ago
Daniel Black
95845b7b65
BF: complain action could match too many IP addresses
11 years ago
Daniel Black
5cc7173fd4
ENH: add xarf email sender for login-attack type
11 years ago
Daniel Black
56b6bf7d25
ENH: reduce firewalld-cmd-new -> firewallcmd-new
11 years ago
Daniel Black
86a0a5962a
BF: revert to fail2ban- prefix as f2b- was intended for 0.9
11 years ago
Daniel Black
9e53892708
BF: did remove instead of move
11 years ago
Daniel Black
af4feb0c92
Actions to have f2b- as prefix instead of fail2ban- as per #462
11 years ago
Daniel Black
fb666b69ff
BF: firewall-cmd-direct-new was too long. Thanks Joel.
11 years ago
Daniel Black
dc154c792e
BF: add init section with name for action.d/apf. Closes #398
11 years ago
Daniel Black
87f68d7564
firewalld-0.3.8 release that support --remove-rules out so documenting this.
11 years ago
Daniel Black
5eddd5d12d
DOC: document required firewalld version as > 0.3.7.1
11 years ago
Daniel Black
8ac6081555
ENH: fix to use upstream --remove-rules
...
https://fedorahosted.org/firewalld/ticket/10
11 years ago
Daniel Black
c2b76d1fd0
Merge pull request #397 from yarikoptic/_enh/unify_default_strings
...
DOC: enh/unify "Default:" strings
11 years ago
Daniel Black
b4cbf82912
DOC: remove Default: on action firewall-cmd-direct-new
11 years ago
Yaroslav Halchenko
4149c7495d
Options in actions to be specified in jails have no "Default"s besides those specified in the files -- thus removing from comments
11 years ago
Daniel Black
f1bb08aa6a
ENH: base blocktype off iptables-blocktype.conf for firewall-cmd-direct-new.conf like other iptables based actions
11 years ago
Daniel Black
12f7ea7ec4
DOC: remove excessive comments from firewall-cmd-direct-new
11 years ago
Daniel Black
0d8d1ae26c
ENH: new action.d/firewall-cmd-direct-new.conf from Redhat Bugzilla #979622
11 years ago
Daniel Black
1a5e17f2a3
BF: use blocktype for iptables-ipset-proto6*
11 years ago
Daniel Black
dcb845f17c
ENH: add iptables-ipset-proto6-allports for blocking all ports
11 years ago
Daniel Black
e12d389c65
MRG/DOC: jail.conf resolution, ChangeLog fixes
11 years ago
Mark McKinstry
b6bf26c9f2
dont' need to set a default name
11 years ago
Mark McKinstry
2668adc896
Merge branch 'master' of github.com:fail2ban/fail2ban
11 years ago
Mark McKinstry
1af4543aca
ability to name the jail that banned the IP with apf
11 years ago
Mark McKinstry
dd9ee4c39a
quotes around the comment put in apf's deny_hosts.rules file
11 years ago
Mark McKinstry
e64493c328
use human readable/longer options when banning and un-banning IPs with apf
11 years ago
Mark McKinstry
c692912a82
don't hardcode absolute path for apf firewall
11 years ago
Mark McKinstry
66aff43d68
remove un-needed '$' line
11 years ago
Beau Raines
060bd45295
ENH - Added server name to subject line in email notifications
...
This is useful when fail2ban is running on multiple servers and
keeping the notifictions separate and knowing which machine is "under
attack".
11 years ago
Daniel Black
ad291d7e38
Merge pull request #346 from grooverdan/bsd-ipfw-default-unreach-port
...
BF: action.d/bsd-ipfw - use blocktype instead of unused action for icmp ...
11 years ago
Daniel Black
4face1f3e7
MRG: resolve conficts in action.d/osx-ipfw design
11 years ago
Andy Fragen
d258a51a23
after some research it looks like setting to unreachable better than deny
11 years ago
Andy Fragen
fe557e5900
more specific actionunban
11 years ago
Andy Fragen
a4884f82cd
add mods from grooverdan and fix actionunban
...
actionunban still not working in grooverdan's mod. I made this one grep both <ip> and <port>. It should be more specific if the same <ip> is banned on multiple ports.
11 years ago