Daniel Black
ee497ff1cb
ENH: filter mysqld-auth can be a is a syslog based service so anchor it using syslog prefix
2013-09-17 07:57:19 +10:00
Daniel Black
317e82e144
TST: one more exim test case
2013-09-02 17:10:49 +10:00
Daniel Black
6b0e2289d4
Merge pull request #335 from grooverdan/gh-333-bind
...
ENH: filter.d/named-refused.conf - BIND 9.9.3 regex changes. Closes gh-333
2013-08-30 21:34:22 -07:00
Daniel Black
cbed57bffd
TST: fix year in named-bind test case
2013-08-28 08:52:56 +10:00
Daniel Black
a401d11644
ENH: add regex for bad zone transfer request/ TST: add test for bind-9.9 zone transfer denied
2013-08-28 00:53:08 +10:00
Yaroslav Halchenko
265a85ec1f
RF: do not catch for now "invalid nonce \S* received - hash is not \S*" -- imho needs more analysis
2013-08-26 09:48:56 -04:00
François Boulogne
e133b9f1d1
MAINT: add support for lightty1.4.31
2013-08-25 21:29:43 +02:00
Daniel Black
ca4729e943
ENH: filter.d/exim.conf - add authentication failures for "plain" authentication
2013-08-25 23:02:10 +10:00
Daniel Black
ef903db3c9
ENH: filter.d/named-refused.conf - BIND 9.9.3 regex changes. Closes gh-333
2013-08-25 22:44:30 +10:00
Daniel Black
cfb7dba268
DOC: merge ChangeLog
2013-08-25 21:26:13 +10:00
Daniel Black
b589533d69
Merge branch 'master' into kwirk-merge
...
Conflicts:
ChangeLog
testcases/files/logs/dropbear
2013-08-25 21:21:14 +10:00
Daniel Black
8e467437b2
TST: fix year on asctime
2013-08-25 18:09:39 +10:00
Yaroslav Halchenko
c84a2e595a
ENH(BF): put 'standard' template after more detailed ones with day of week and year
...
otherwise years present in the freshly contributed by Dan apache regexes do not match
although should have. I had also to adjust failing now vsftpd test
2013-08-25 17:52:12 +10:00
Daniel Black
21914d155e
TST: add failJSON data
2013-08-25 17:49:09 +10:00
Daniel Black
a9eb8a76c6
merge of change log and apache-auth differences
2013-08-25 16:51:35 +10:00
Steven Hiscocks
53d8a46e8a
Merge pull request #7 from grooverdan/gh-303-merge
...
Gh 303 merge
2013-08-21 12:20:48 -07:00
Daniel Black
ed42b08789
TST: merge dropbear log samples
2013-08-19 21:25:33 +10:00
Daniel Black
61d43608ae
ENH: filter.d/postfix - add filter for VRFY. Closes gh-322
2013-08-19 18:42:39 +10:00
Daniel Black
4f39d2b1fd
TST: fix failJson year
2013-08-18 23:04:53 +10:00
Daniel Black
444e989dd5
TST: another zone transfer refused example for file named-refused
2013-08-18 22:49:59 +10:00
Daniel Black
5d451bc4d6
ENH: add refused zone tranfer to named-refused filter. closes #323
2013-08-18 22:19:31 +10:00
Daniel Black
7b2773889d
TST: apache-auth filter - nonce timetravel tests + other expression fixes
2013-07-29 02:29:04 +10:00
Daniel Black
0fb04cb2f0
ENH: filter enhancements on mod-digest (with test cases) for apache-auth (httpd-2.4.4)
2013-07-28 22:00:55 +10:00
Jamyn Shanley
a355fab91b
https://github.com/fail2ban/fail2ban/issues/306
...
Fix regex for latest dropbear (keep backwards compatibility). Add test case logfiles.
Signed-off-by: Jamyn Shanley <jshanley@gmail.com>
2013-07-27 03:43:32 +00:00
Jamyn Shanley
8936f2cd02
fail2ban-users: Sebastian Arcus - Detect device auth failures on Asterisk 11
2013-07-27 00:06:06 +00:00
Steven Hiscocks
1c7d28d1ea
TST: Add qmail sample log
2013-07-26 17:03:14 +01:00
Steven Hiscocks
5437f5fe90
TST: Add gssftpd sample log
2013-07-26 17:02:53 +01:00
Steven Hiscocks
f7d8e68738
TST: Add apache-badbots sample log
2013-07-26 12:32:29 +01:00
Steven Hiscocks
37f240bef0
TST: Add sample log for php-url-fopen filter
2013-07-21 22:13:37 +01:00
Steven Hiscocks
cf1e5bdbc2
ENH: Tweak proftpd regex and add sample logs
...
Needed to add optional ":" post __pid_re, and for consistency, decided
to make use of __prefix_line instead which includes this.
2013-07-21 22:03:49 +01:00
Steven Hiscocks
e59a4960a3
TST: Add additional sample log line for apache-noscript
2013-07-21 16:48:12 +01:00
Steven Hiscocks
8b9bafda79
ENH: Change lighttpd-fastcgi to suhosin, and improve regex and samples
...
suhosin is hardened php implmentation, which will log the alerts (as
seen in samples) to stderr, which is picked up by fastcgi webserver
(e.g. lighttpd, apache, nginx)
2013-07-21 16:35:37 +01:00
Steven Hiscocks
4033857f63
ENH: Improve xinetd-fail regex and add sample logs
2013-07-21 15:44:09 +01:00
Steven Hiscocks
b5ffbced37
TST: Sample test cases now handle ignoreregex and add recidive samples
2013-07-21 15:31:32 +01:00
Steven Hiscocks
e7b7815de3
TST: Add additional sshd sample logs
2013-07-21 15:22:44 +01:00
Steven Hiscocks
a11f91b835
ENH: Improve cyrus-imap regex and add extra sample line
2013-07-20 17:28:28 +01:00
Steven Hiscocks
534be189dc
ENH: Improve sieve regex and add sample line
2013-07-20 17:26:09 +01:00
Steven Hiscocks
d791ba12ba
TST: Add sample log for dropbear filter
2013-07-20 16:54:28 +01:00
Steven Hiscocks
ab671b0b1a
ENH: Improve wuftpd failregex, drop duplicate pam regex and add sample
...
For wu-ftpd configured to use pam, the pam filter used be used, as regex
is more robust.
2013-07-20 16:34:24 +01:00
Steven Hiscocks
57a6c11260
ENH: Improve courierlogin regex and add sample logs
2013-07-20 15:53:18 +01:00
Steven Hiscocks
bd175f0267
ENH: Improve cyrus-imap regex and add sample log file
2013-07-20 15:38:29 +01:00
Steven Hiscocks
83a80a29ea
ENH: Improve couriersmtp and add sample logs
2013-07-20 15:34:00 +01:00
Steven Hiscocks
eb2f0c9272
ENH: Improve postfix regex and add more samples
2013-07-20 15:31:21 +01:00
Daniel Black
5cfe108186
ENH: filter enhancements (with test cases) for apache-auth (httpd-2.4.4)
2013-07-20 22:21:08 +10:00
Daniel Black
bdcde678d1
TST: fix year
2013-07-20 15:15:02 +10:00
Daniel Black
fcf79b475f
ENH: new filter perdition.conf
2013-07-19 20:14:53 +10:00
Steven Hiscocks
a012b54117
TST: Add additional postfix filter sample
2013-07-18 22:17:31 +01:00
Steven Hiscocks
2a3a627322
TST: Add sample for sieve regex
2013-07-18 22:17:14 +01:00
Daniel Black
fa85be2eea
DOC/TST: fix configuration path for apache-auth test cases
2013-07-18 08:37:05 +10:00
Daniel Black
8ce9c78474
TST: apache-auth digest logs
2013-07-18 00:36:17 +10:00