Daniel Black
caf284d518
DOC: ChangeLog deconflict
2013-10-02 09:11:15 +10:00
Daniel Black
23dd734aa9
Merge pull request #366 from grooverdan/dovecot
...
ENH: dovecot regex to match failure reported by Bob Cohen on mailing lis...
2013-10-01 15:50:39 -07:00
Daniel Black
f998e01590
Merge pull request #359 from grooverdan/pureftpd
...
ENH: Pureftpd syslog prefixing and filter achoring
2013-10-01 15:14:33 -07:00
Daniel Black
ba8183b116
Merge pull request #372 from grooverdan/uw-imap
...
ENH: filter.d/uwimap-auth added. Closes #18
2013-10-01 15:13:11 -07:00
Daniel Black
262616f7a7
ENH: filter.d/uwimap-auth - failure of an admin override to regex
2013-10-01 22:32:57 +10:00
Daniel Black
9211179d30
ENH: filter.d/uwimap-auth - add "disabled" to regex
2013-10-01 22:10:33 +10:00
Daniel Black
cbdf4ceedd
TST: test cases for uw-imapd thanks to Internet
2013-10-01 10:21:11 +10:00
Yaroslav Halchenko
fab3772a60
TST: explicitly test date patterns being anchored or not
2013-09-30 20:15:24 -04:00
Yaroslav Halchenko
c35d2844bd
Merge pull request #371 from grooverdan/ssh-6.3
...
BF: fix regex for openssh-6.3
2013-09-30 16:32:14 -07:00
Yaroslav Halchenko
c7728331c7
Merge pull request #369 from yarikoptic/master
...
Dealing with dangling symlinks -- avoid adding those files to server for monitoring
2013-09-30 16:28:54 -07:00
Steven Hiscocks
a8f2448349
ENH: Allow SE Linux epoch date detection
2013-09-30 20:58:24 +01:00
Daniel Black
b3b62d65bf
ENH: filter.d/uwimap-auth added. Closes #18
2013-09-29 18:06:27 +10:00
Daniel Black
1eeb6e94bd
BF: fix regex for openssh-6.3
2013-09-29 17:28:33 +10:00
Daniel Black
8a458b45bc
TST: dummyjail in own class
2013-09-29 15:57:03 +10:00
Daniel Black
86d3ee5373
TST: py2.5 compatibility - no with
2013-09-29 15:46:15 +10:00
Daniel Black
723ea964a7
TST: failmanager get/sets on FailTotal and MaxTime
2013-09-29 15:12:44 +10:00
Daniel Black
bcc16789d0
TST: test elements of DateTemplate base class
2013-09-29 15:02:38 +10:00
Daniel Black
b576c4718d
TST: add test cases for Actions
2013-09-29 14:52:59 +10:00
Daniel Black
891b436874
TST: more complete Action testing
2013-09-29 14:17:31 +10:00
Yaroslav Halchenko
dcaacad7e3
BF: do not pass dangling symlinks to the server to be monitored
...
This is more of a workaround I guess than a "solution". Ideally server
should be more clever and allow adding symlinks which eventually might
point to existing file. But that is probably would be too much complication
for a rare use case. User on the mailing list informed that then server
does not monitor even other files, thus as a quick workaround -- do not even add dangling links
2013-09-28 22:16:34 -04:00
Yaroslav Halchenko
cf76019cca
TST: that we do receive IOError if trying to feed broken symlink into path to be monitored by server
2013-09-28 21:59:11 -04:00
Daniel Black
4b5ecbccd1
ENH: debuggex URLs with fail2ban-regex
2013-09-22 13:20:17 +10:00
Daniel Black
8c2a5612ed
DOC: resolve ChangeLog conflicts
2013-09-19 19:38:28 +10:00
Daniel Black
3be7dcd701
DOC: resolve ChangeLog conflicts
2013-09-19 19:23:02 +10:00
Daniel Black
89e0520675
ENH: dovecot regex to match failure reported by Bob Cohen on mailing list
2013-09-19 08:25:50 +10:00
Daniel Black
9ce1e33313
TST: pureftpd - everything I've seen suggests that pureftpd only does syslog - even back to 2004. Not sure how this second example came into existance
2013-09-17 22:24:28 +10:00
Daniel Black
ad5fb81f4b
TST: failJSON set match to false on longer supported pam version
2013-09-17 21:18:24 +10:00
Daniel Black
bec723b21d
TST: failJSON date fix
2013-09-17 10:51:48 +10:00
Daniel Black
7e756dfada
TST: correct failJSON for www3.google.com -> www.google.com changes. Disable test case for pre-0.99.2.0 version of linux-pam failure messages
2013-09-17 10:48:09 +10:00
Daniel Black
8f41422262
TST: domains need to exist for fail2ban-regex to work
2013-09-17 10:09:19 +10:00
Daniel Black
ee497ff1cb
ENH: filter mysqld-auth can be a is a syslog based service so anchor it using syslog prefix
2013-09-17 07:57:19 +10:00
Daniel Black
504111b0b1
ENH: filter.d/recidive - anchor regex at start and support f2b SYSLOG target
2013-09-16 01:22:42 +10:00
Yaroslav Halchenko
f1adf75b59
ENH: basic testing for iso8601 code which had no explicit tests + spit out ValueError for incorrect type of input and ParseError otherwise
2013-09-12 23:12:18 -04:00
Daniel Black
317e82e144
TST: one more exim test case
2013-09-02 17:10:49 +10:00
Yaroslav Halchenko
cd100ce274
Merge pull request #342 from grooverdan/datedetector_test
...
TST: improve datedetector error reporting
2013-08-31 06:53:59 -07:00
Daniel Black
6b0e2289d4
Merge pull request #335 from grooverdan/gh-333-bind
...
ENH: filter.d/named-refused.conf - BIND 9.9.3 regex changes. Closes gh-333
2013-08-30 21:34:22 -07:00
Daniel Black
2acaef9d89
TST: more detail in assertion
2013-08-29 09:17:13 +10:00
Daniel Black
f2a60daea1
TST/BF: assertIsNotNone replaced with assertNotEqual for python 2.4 compatibility
2013-08-28 12:55:21 +10:00
Daniel Black
13b4f176ab
TST: improve datedetector error reporting
2013-08-28 12:41:20 +10:00
Daniel Black
cbed57bffd
TST: fix year in named-bind test case
2013-08-28 08:52:56 +10:00
Daniel Black
a401d11644
ENH: add regex for bad zone transfer request/ TST: add test for bind-9.9 zone transfer denied
2013-08-28 00:53:08 +10:00
Yaroslav Halchenko
265a85ec1f
RF: do not catch for now "invalid nonce \S* received - hash is not \S*" -- imho needs more analysis
2013-08-26 09:48:56 -04:00
François Boulogne
e133b9f1d1
MAINT: add support for lightty1.4.31
2013-08-25 21:29:43 +02:00
Daniel Black
ca4729e943
ENH: filter.d/exim.conf - add authentication failures for "plain" authentication
2013-08-25 23:02:10 +10:00
Daniel Black
ef903db3c9
ENH: filter.d/named-refused.conf - BIND 9.9.3 regex changes. Closes gh-333
2013-08-25 22:44:30 +10:00
Daniel Black
cfb7dba268
DOC: merge ChangeLog
2013-08-25 21:26:13 +10:00
Daniel Black
b589533d69
Merge branch 'master' into kwirk-merge
...
Conflicts:
ChangeLog
testcases/files/logs/dropbear
2013-08-25 21:21:14 +10:00
Daniel Black
62c13c15d6
TST: reorder and condense error message for Multiple regexs matched
2013-08-25 21:02:30 +10:00
Daniel Black
9a1df3501b
TST: display details of duplicate matches
2013-08-25 20:19:42 +10:00
Daniel Black
cb61fcd326
TST: standardise output format on Time mismatch test
2013-08-25 18:11:54 +10:00