Daniel Black
7e756dfada
TST: correct failJSON for www3.google.com -> www.google.com changes. Disable test case for pre-0.99.2.0 version of linux-pam failure messages
2013-09-17 10:48:09 +10:00
Daniel Black
8f41422262
TST: domains need to exist for fail2ban-regex to work
2013-09-17 10:09:19 +10:00
Daniel Black
ee497ff1cb
ENH: filter mysqld-auth can be a is a syslog based service so anchor it using syslog prefix
2013-09-17 07:57:19 +10:00
Daniel Black
13ec9d58c0
ENH: filter gssftpd is a syslog based service so anchor it using syslog prefix
2013-09-17 07:25:23 +10:00
Yaroslav Halchenko
bb32295b50
DOC: minor - untabified few entries in the ChangeLog
2013-09-16 09:49:24 -04:00
Daniel Black
673cc4d77f
ENH: anchor at end of recidive filter
2013-09-16 18:43:56 +10:00
Yaroslav Halchenko
38b07ca46e
BF: catch and report exceptions while executing commands in client interactive mode ( Close #353 )
2013-09-15 23:05:32 -04:00
Daniel Black
504111b0b1
ENH: filter.d/recidive - anchor regex at start and support f2b SYSLOG target
2013-09-16 01:22:42 +10:00
Yaroslav Halchenko
f1adf75b59
ENH: basic testing for iso8601 code which had no explicit tests + spit out ValueError for incorrect type of input and ParseError otherwise
2013-09-12 23:12:18 -04:00
Yaroslav Halchenko
abc75b3022
ENH: simplify our formatExceptionInfo
...
Actually it was not that consistent before and e.g. could add () if
exception had no parameters and empty tuple. Simple str'ing seems to
provide the most consistent output and now would bring up our coverage %
2013-09-12 22:47:58 -04:00
Yaroslav Halchenko
660e0597a7
DOC: Adding Manuel Ramierz to THANKS (was on Wiki) and spacing our Nick Munger
2013-09-12 14:21:20 -04:00
Yaroslav Halchenko
851520436f
DOC: slight tune up of THANKS file to list Cyril's role there since now THANKS is pointed to from Wiki
2013-09-12 13:24:26 -04:00
Daniel Black
a87b77af59
Merge pull request #350 from beauraines/master
...
ENH: Added server name to subject line in email notifications
2013-09-10 06:25:23 -07:00
Beau Raines
060bd45295
ENH - Added server name to subject line in email notifications
...
This is useful when fail2ban is running on multiple servers and
keeping the notifictions separate and knowing which machine is "under
attack".
2013-09-08 15:21:58 -07:00
Daniel Black
ad291d7e38
Merge pull request #346 from grooverdan/bsd-ipfw-default-unreach-port
...
BF: action.d/bsd-ipfw - use blocktype instead of unused action for icmp ...
2013-09-04 16:18:19 -07:00
Daniel Black
e5f1a7f050
Merge pull request #344 from grooverdan/osx
...
ENH: OSX ipfw based on Andy Fragen's work
2013-09-04 16:16:16 -07:00
Daniel Black
4face1f3e7
MRG: resolve conficts in action.d/osx-ipfw design
2013-09-05 09:07:10 +10:00
Andy Fragen
d258a51a23
after some research it looks like setting to unreachable better than deny
2013-09-04 11:28:03 -07:00
Daniel Black
317e82e144
TST: one more exim test case
2013-09-02 17:10:49 +10:00
Andy Fragen
fe557e5900
more specific actionunban
2013-09-01 13:09:51 -07:00
Andy Fragen
a4884f82cd
add mods from grooverdan and fix actionunban
...
actionunban still not working in grooverdan's mod. I made this one grep both <ip> and <port>. It should be more specific if the same <ip> is banned on multiple ports.
2013-08-31 08:39:19 -07:00
Yaroslav Halchenko
8ae55fe03b
ChangeLog entries (+few typo fixes) for the last merges
2013-08-31 10:04:03 -04:00
Yaroslav Halchenko
f1487bfb74
Merge pull request #240 from jpmx/master
...
bug fixed on redhat-initd
per @opoplawski blessing
2013-08-31 06:57:42 -07:00
Yaroslav Halchenko
1135ff5297
Merge pull request #319 from opoplawski/jail.d
...
Install empty /etc/fail2ban/jail.d and fail2ban.d directories
2013-08-31 06:55:33 -07:00
Yaroslav Halchenko
cd100ce274
Merge pull request #342 from grooverdan/datedetector_test
...
TST: improve datedetector error reporting
2013-08-31 06:53:59 -07:00
Daniel Black
6b0e2289d4
Merge pull request #335 from grooverdan/gh-333-bind
...
ENH: filter.d/named-refused.conf - BIND 9.9.3 regex changes. Closes gh-333
2013-08-30 21:34:22 -07:00
Daniel Black
f2bcf84893
BF: action.d/bsd-ipfw - use blocktype instead of unused action for icmp rejecting blocked packets
2013-08-31 11:40:04 +10:00
Daniel Black
749f215089
ENH: port optional
2013-08-31 11:07:15 +10:00
Daniel Black
8b22fa15b5
BF: reverted to simplier random rulenum. If your machine is handling 1000s of block the addition complexity isnt what you want
2013-08-31 11:03:01 +10:00
Daniel Black
b31799a322
ENH: add action.d/osx-afctl anonymously contributed on f2b wiki
2013-08-31 10:51:04 +10:00
Daniel Black
808aa1a792
ENH: added jail.conf example. closes gh-340
2013-08-31 09:39:21 +10:00
Daniel Black
5741348f45
ENH: more options and ruggedness to prevent unintensional consequences
2013-08-31 09:38:18 +10:00
Daniel Black
908d4adf6f
DOC: credits and thanks for Andy for osx-ipfw
2013-08-31 09:37:15 +10:00
Daniel Black
52bd0f86a8
Merge branch 'osx-ipfw' of https://github.com/afragen/fail2ban into osx
2013-08-31 09:09:04 +10:00
Daniel Black
7cc3e8a8c0
BF: Invert expression on actionstop in bsd-ipfw.conf to ensure exit status 0 on success. Closes gh-343
2013-08-31 08:59:02 +10:00
Daniel Black
2acaef9d89
TST: more detail in assertion
2013-08-29 09:17:13 +10:00
Orion Poplawski
71317332ec
Install empty /etc/fail2ban/fail2ban.d directory
2013-08-28 11:33:05 -06:00
Daniel Black
f2a60daea1
TST/BF: assertIsNotNone replaced with assertNotEqual for python 2.4 compatibility
2013-08-28 12:55:21 +10:00
Daniel Black
13b4f176ab
TST: improve datedetector error reporting
2013-08-28 12:41:20 +10:00
Daniel Black
15f2f38972
ENH: anchor regex at start
2013-08-28 12:32:40 +10:00
Daniel Black
d5684a0834
BF: filter.d/routecube-auth - time offset can be positive or negative
2013-08-28 11:57:38 +10:00
Daniel Black
cbed57bffd
TST: fix year in named-bind test case
2013-08-28 08:52:56 +10:00
Daniel Black
a401d11644
ENH: add regex for bad zone transfer request/ TST: add test for bind-9.9 zone transfer denied
2013-08-28 00:53:08 +10:00
Andy Fragen
ef504c869f
added osx specific ipfw action with random rulenum
2013-08-26 16:06:23 -07:00
Yaroslav Halchenko
265a85ec1f
RF: do not catch for now "invalid nonce \S* received - hash is not \S*" -- imho needs more analysis
2013-08-26 09:48:56 -04:00
Daniel Black
5dfceee8cf
Merge pull request #339 from grooverdan/lighttpd
...
ENH: Lighttpd filter enhancements - tighten regex
2013-08-25 15:56:42 -07:00
Daniel Black
b8e7d0b867
ENH: further tighten lighttpd basic auth regex
2013-08-26 08:51:40 +10:00
Daniel Black
a7ebb84a7d
ENH: tighted up lighttpd regex
2013-08-26 08:42:45 +10:00
Daniel Black
1aabee20f6
DOC: credits for gh-338
2013-08-26 08:42:00 +10:00
Daniel Black
ac6c852374
Merge pull request #338 from sciunto/lightty1.4
...
MAINT: add support for lightty1.4.31
2013-08-25 14:52:36 -07:00