Daniel Black
d1faae3b3b
BF: port not used in jail definition for freeswitch
2014-01-04 08:01:42 +11:00
Daniel Black
04d28fd2e1
ENH: add filter freeswitch - as raised on mailing list
2014-01-03 13:00:37 +11:00
Daniel Black
856407379b
ENH: add filter openwebmail. Closes gh-543.
2013-12-31 08:09:00 +11:00
Daniel Black
c074773805
ENH: apache modsecurity from 0.9 branch
2013-12-29 07:06:13 +00:00
Daniel Black
ddac79c15c
TST: include blank ignorecommand in jail.conf to indicate default value and to raise test coverage
2013-12-25 11:01:31 +00:00
bes.internal
ebd89ec077
New ignorecommand that is added to the ignoreip list from output of an external program
...
ignorecommand update man and fix protocol help
ENH: run ignore command only after internal list has been examined. Change interface on ignorecommand to take IP as environment variable and return true if it is to be banned
ENH: ignore IP command to take tagged command
DOC: man pages for ingorecommand
TST: add test cases for ignorecommand
2013-12-24 23:55:35 +03:00
Steven Hiscocks
f742ed0e4b
DOC: when to use blocklist.de reporting
...
Taken from commit 1846056606
2013-12-05 18:06:53 +00:00
Steven Hiscocks
e810ec009d
ENH: Added blocklist.de reporting API action
2013-12-05 08:22:20 +00:00
Yaroslav Halchenko
25e967f23b
Merge branch 'mysqld-syslog-iptables-name-too-long' of https://github.com/grooverdan/fail2ban
...
* 'mysqld-syslog-iptables-name-too-long' of https://github.com/grooverdan/fail2ban :
BF: jail name mysqld-syslog-iptables too long. removed -iptables. Thanks Stefan (#447 )
Conflicts:
ChangeLog
2013-11-29 10:02:31 -05:00
Daniel Black
b9b2ddf996
BF: smtps not IANA standard. Closes #447
2013-11-29 21:47:53 +11:00
Daniel Black
cade746307
BF: jail name mysqld-syslog-iptables too long. removed -iptables. Thanks Stefan ( #447 )
2013-11-29 21:45:11 +11:00
Daniel Black
13223c33f5
MRG: recidive-protocol-all
2013-11-25 08:22:09 +11:00
Daniel Black
dab2ddb9da
ENH: recidive jail to block all protocols. Closes #440
2013-11-18 07:57:16 +11:00
Daniel Black
b3b9ea4559
ENH: jail for solid-pop3d
2013-11-18 07:42:45 +11:00
Daniel Black
ab9d921162
BF: missed action in nginx-http-auth
2013-11-08 10:09:19 +11:00
Daniel Black
a148d35d70
ENH: add filter.d/nginx-http-auth. Partially forfills #405
2013-11-08 10:06:40 +11:00
Daniel Black
93de46ac72
BF: maxretry=5 for ssh as per DEVELOP. align = in jail.conf
2013-10-31 00:52:47 +11:00
Daniel Black
de9977441a
DOC: move named and mysql instructions into the filters from jail.conf
2013-10-30 21:12:16 +11:00
Daniel Black
7ab909d056
DOC: space out jail.conf consistantly
2013-10-30 20:34:06 +11:00
Daniel Black
95f3f38682
MRG: merge ChangeLog and jail.conf
2013-10-30 20:19:41 +11:00
Daniel Black
e3150044fd
BF: fix selinux
...
TST: ignore *common.conf files in test cases as these are included
BF: Remove USER_LOGIN from selinux-ssh as its a duplicate message
ENH: add sample jail.conf
2013-10-30 20:05:49 +11:00
Daniel Black
a991adb83f
ENH: add submission, smtps and sieve to blocked ports since this also typically rely on dovecot auth
2013-10-29 14:33:45 +11:00
Daniel Black
8412303131
ENH: dovecot jail examples
2013-10-29 10:17:45 +11:00
Daniel Black
0c14707201
ENH: add dovecot jail
2013-10-26 10:01:04 +11:00
Daniel Black
b61fe0f12d
Merge pull request #378 from grooverdan/sasl
...
ENH: filter.d/postfix-sasl - anchor regex at start and rename from filter.d/sasl
2013-10-22 04:51:24 -07:00
Daniel Black
4ecc063bd0
ENH: rename filter.d/sasl -> filter.d/postfix-sasl
2013-10-22 22:40:29 +11:00
Daniel Black
123ad1cc9c
MRG: Merge branch 'asterisk-common-jail'
2013-10-14 22:29:56 +11:00
Daniel Black
8421007f32
MRG: merge man/jail.conf.5 entries
2013-10-14 22:28:34 +11:00
Daniel Black
8fe542ca9f
DOC: reintroduce comment on comments
2013-10-11 06:48:31 +11:00
Daniel Black
6b6169178f
ENH: mysql syslog jail.conf base
2013-10-10 10:00:20 +11:00
Daniel Black
ee58696531
DOC: try to encourage jail.local jail.d/*.local a lot more
2013-10-10 09:56:52 +11:00
Daniel Black
6ef33981e3
ENH: new asterisk jail to replace asterisk-(tcp|udp) (now that gh-37 is fixed)
2013-10-10 09:41:05 +11:00
Daniel Black
2d1bd54439
Merge pull request #379 from grooverdan/webmin
...
ENH: filter.d/webmin anchor at start and use syslog
2013-10-08 20:13:14 -07:00
Daniel Black
2a1d629d88
BF: webmin -> webmin-auth
2013-10-09 11:08:44 +11:00
Daniel Black
ab457acc4d
BF: fix name in action for uwimap-auth
2013-10-09 11:06:38 +11:00
Daniel Black
0beea03914
ENH: jail.conf example for webmin
2013-10-09 11:05:50 +11:00
Daniel Black
b3b62d65bf
ENH: filter.d/uwimap-auth added. Closes #18
2013-09-29 18:06:27 +10:00
Daniel Black
e12d389c65
MRG/DOC: jail.conf resolution, ChangeLog fixes
2013-09-29 08:21:13 +10:00
Mark McKinstry
4187e87b69
don't enabel ssh-apf jail by default
2013-09-25 18:35:09 -04:00
Mark McKinstry
f9f4d2728f
add an example jail for apf action and ssh filter
2013-09-25 17:59:37 -04:00
Daniel Black
b31799a322
ENH: add action.d/osx-afctl anonymously contributed on f2b wiki
2013-08-31 10:51:04 +10:00
Daniel Black
808aa1a792
ENH: added jail.conf example. closes gh-340
2013-08-31 09:39:21 +10:00
Daniel Black
b589533d69
Merge branch 'master' into kwirk-merge
...
Conflicts:
ChangeLog
testcases/files/logs/dropbear
2013-08-25 21:21:14 +10:00
Daniel Black
56faf7f5ad
DOC: fix ChangeLog merge
2013-07-28 18:02:38 +10:00
Daniel Black
8f532f9148
NIT: space remove
2013-07-24 11:29:58 +10:00
Steven Hiscocks
8b9bafda79
ENH: Change lighttpd-fastcgi to suhosin, and improve regex and samples
...
suhosin is hardened php implmentation, which will log the alerts (as
seen in samples) to stderr, which is picked up by fastcgi webserver
(e.g. lighttpd, apache, nginx)
2013-07-21 16:35:37 +01:00
Daniel Black
6fdfd8d356
BF: fix port
2013-07-20 15:09:25 +10:00
Daniel Black
eea5b071e6
ENH: jail for perdition
2013-07-19 20:27:15 +10:00
Daniel Black
ab10664b57
ENH: action.d/hostsdeny to take daemon_list arguement as suggested in README.Solaris
2013-07-14 16:20:21 +10:00
Steven Hiscocks
606e97683b
BF: jail.conf multiport actions previously using single port iptables
2013-07-12 23:34:04 +01:00