Serg G. Brester
f917b4346b
Merge pull request #1974 from sebres/nginx-block-map
...
session-related blacklisting via nginx
7 years ago
sebres
55c2a9968a
remove lacking [Init] section check ([Init] section not necessary anymore for actions also);
...
fix sporadic error by shutdown server in with_foreground_server_thread decorator (if shutdown too fast, but end-phase still does not reached the tester-thread);
7 years ago
sebres
b62ab2d51e
ChangeLog updated
7 years ago
sebres
76f2865883
implemented new action "action.d/nginx-block-map.conf", used in order to ban not IP-related tickets via nginx (session blacklisting in nginx-location with map-file);
7 years ago
Serg G. Brester
4fa0f48fa1
Merge pull request #1970 from sebres/fix-gh-1876
...
Fix logging to systemd-journal (gh-1876)
7 years ago
sebres
6db9ae8574
ChangeLog updated
7 years ago
sebres
af0f7e93ce
better handling by start/stop of server in foreground mode;
...
don't call logging.shutdown because part of exit in fail2bancmdline.
7 years ago
sebres
f31195a4fc
added new logtarget "SYSOUT" to log from fail2ban working in foreground as systemd-service (in opposite to "STDOUT" don't log time-stamps).
7 years ago
sebres
100b531aff
travis: add build for python 3.7-dev and switch to newest pypy3.3 in travis
7 years ago
sebres
7bf5980def
no root option if testing within virtualenv (fixed now).
7 years ago
sebres
fa007bfa7c
remove build folder, if created through setup-process in test
7 years ago
sebres
eac80966c5
Fix scripts-root within `fail2ban.service` (relative install root-base directory).
...
This is amend for e3b061e94b
.
Closes gh-1964
7 years ago
sebres
6db8db04f8
Merge branch 'master' into 0.10: fixed test-cases covering dns2ip (IP of www.epfl.ch changed)
7 years ago
sebres
5708b8b90e
fixed test-cases covering dns2ip (IP of www.epfl.ch changed)
7 years ago
sebres
159957ab88
filter.d/sshd.conf: extended failregex for modes "extra"/"aggressive": now finds all possible (also future) forms of "no matching (cipher|mac|MAC|compression method|key exchange method|host key type) found", see "ssherr.c" for all possible SSH_ERR_..._ALG_MATCH errors;
...
obsolete (multi-line buffered) variant extended also.
Closes gh-1943, gh-1944
7 years ago
sebres
7e756da2b9
Merge remote-tracking branch 'remotes/gh-upstream/master' into 0.10
7 years ago
Serg G. Brester
4cd3b2d4c9
Merge pull request #1955 from sebres/fix-initial-config
...
config/paths-*.conf: initial values and normalization
7 years ago
Serg G. Brester
ee80c52430
Update ChangeLog
7 years ago
sebres
eba68a8f37
config/paths-common.conf: Added initial values for `syslog_authpriv`, `syslog_mail` in order to avoid errors while parsing/interpolating configuration;
...
Note the systemd-backend does not need the logpath at all;
Some defaults normalized (minimized configs, don't need to overwrite values in distribution-related path if equal).
7 years ago
Serg G. Brester
c06f3c3fb8
Merge pull request #1812 from jpotter/patch-1
...
Replace port imap3 with imap
7 years ago
Serg G. Brester
4d10c615c4
Update ChangeLog
...
typo
7 years ago
Serg G. Brester
8b26fd2778
Update ChangeLog
7 years ago
Serg G. Brester
9876dd44f9
replace port imap3 with imap everywhere, since imap3 is not a standard port and old rarely (if ever) used and missing on some systems
...
(see gh-1942)
7 years ago
Jeff Potter
4a2fc8b7e8
Include imap (port 143) in courier-auth ports
...
imap was missing from the list of ports, preventing fail2ban from blocking connections on standard IMAP port 143.
7 years ago
Serg G. Brester
a87af7bf41
Merge pull request #1948 from itoffshore/alpine
...
gentoo-initd: add descriptions
7 years ago
Stuart Cardall
18d2761dc0
gentoo-initd: add descriptions
...
add descriptions to stop syslog errors for extra_started_commands when running:
rc-service ipset describe
Oct 28 15:13:30 xxxx daemon.warn /etc/init.d/fail2ban[26446]: ^[[1m^[[36mreload^[[m: no description
Oct 28 15:13:30 xxxx daemon.warn /etc/init.d/fail2ban[26447]: ^[[1m^[[36mshowlog^[[m: no description
7 years ago
sebres
b615a98540
jail.conf: avoid overwriting of default value of the parameter `chain` of several actions (where default chain != INPUT);
...
test-cases extended to cover the same logic (use `<known/chain>` instead of fix value `INPUT`);
Closes gh-1949
7 years ago
Serg G. Brester
e07a8cda07
Update jail.conf
...
Documentation of parameters for action blocklist_de, closes gh-1940
7 years ago
Serg G. Brester
2409c4506a
Merge pull request #1917 from martin61/patch-1
...
add ip6tables.service ipset.service in systemd unit
7 years ago
martin61
5db497017a
add ip6tables.service ipset.service in systemd unit
7 years ago
Serg G. Brester
1a8fb6290d
Merge pull request #1926 from sebres/0.10-pf-actionflush
...
action.d/pf.conf: wildcard anchoring example + bulk-unban with command `actionflush`
7 years ago
sebres
0e66e3cc57
Merge branch 'master' into 0.10
...
# Conflicts:
# config/filter.d/asterisk.conf
7 years ago
Serg G. Brester
0aeb91d1e2
Merge pull request #1929 from miken32/patch-1
...
Remove invalid (vulnerable) regex using IP from foreign input (not the originator).
7 years ago
Serg G. Brester
d81405adbc
Update ChangeLog
...
typo
7 years ago
Serg G. Brester
b6ab0aa83f
Update ChangeLog
...
more detailed entry
7 years ago
Michael Newton
894a05b843
Update ChangeLog
7 years ago
Michael Newton
3f715e8577
Remove tests
7 years ago
Michael Newton
d5d1fe679f
Remove invalid regex
...
Resolves #1927
7 years ago
sebres
a1b863fcf6
action.d/pf.conf: extended with bulk-unban, command `actionflush` in order to flush all bans at once (by stop jail, resp. shutdown of fail2ban)
7 years ago
sebres
667f48817b
Merge pull request #1925 from sebres/0.10-fix-pf-multiport:
...
action.d/pf.conf: fix multiport syntax
7 years ago
sebres
3c4910a3e2
ChangeLog entry + note for possible incompatibility.
7 years ago
sebres
8726c9fb0a
pf.conf: enclose ports in braces, multiple ports expecting this syntax `... any port {http, https}`.
...
Note this would be backwards-incompatible change (for the people already enclosing multiports in braces in jail.local).
closes gh-1915
7 years ago
Serg G. Brester
c6029bbef6
Merge pull request #1919 from IdahoPL/IdahoPL-patch-1
...
Update pf.conf commet to fix syntax error
7 years ago
Łukasz Wąsikowski
a4f94d2619
Update pf.conf
...
Fix comment, because current one won't work:
cat /etc/pf.conf
anchor f2b {
sshd
}
# service pf reload
Reloading pf rules.
/etc/pf.conf:2: syntax error
New version:
cat /etc/pf.conf
anchor f2b {
anchor sshd
}
# service pf reload
Reloading pf rules.
7 years ago
Serg G. Brester
c42dd6941c
Merge pull request #1921 from harry-wood/patch-1
...
typo
7 years ago
Harry Wood
ea1b663f85
typo
...
spell "positive" (...but also somebody should finish this sentence)
7 years ago
sebres
028f32b74b
bump version (0.10.1 -> 0.10.2.dev1)
7 years ago
sebres
351abeb4ff
prepare release: bump version, update ChangeLog, man's and MANIFEST etc.
7 years ago
sebres
ceff489a46
amend to a4459765ef438db83a2898ba832ff7acba033e29: irrelevant condition removed
7 years ago
sebres
a4459765ef
pyinotify/polling: test filter reaction by delete of watching file, better detection of pending file (avoid errors in fail2ban.log during log-rotation).
...
Closes gh-1865 for filterpyinotify ("cannot remove WD=2").
7 years ago