Daniel Black
f998e01590
Merge pull request #359 from grooverdan/pureftpd
...
ENH: Pureftpd syslog prefixing and filter achoring
2013-10-01 15:14:33 -07:00
Daniel Black
ba8183b116
Merge pull request #372 from grooverdan/uw-imap
...
ENH: filter.d/uwimap-auth added. Closes #18
2013-10-01 15:13:11 -07:00
Daniel Black
262616f7a7
ENH: filter.d/uwimap-auth - failure of an admin override to regex
2013-10-01 22:32:57 +10:00
Daniel Black
9211179d30
ENH: filter.d/uwimap-auth - add "disabled" to regex
2013-10-01 22:10:33 +10:00
Daniel Black
cbdf4ceedd
TST: test cases for uw-imapd thanks to Internet
2013-10-01 10:21:11 +10:00
Yaroslav Halchenko
fab3772a60
TST: explicitly test date patterns being anchored or not
2013-09-30 20:15:24 -04:00
Yaroslav Halchenko
c35d2844bd
Merge pull request #371 from grooverdan/ssh-6.3
...
BF: fix regex for openssh-6.3
2013-09-30 16:32:14 -07:00
Yaroslav Halchenko
c7728331c7
Merge pull request #369 from yarikoptic/master
...
Dealing with dangling symlinks -- avoid adding those files to server for monitoring
2013-09-30 16:28:54 -07:00
Steven Hiscocks
a8f2448349
ENH: Allow SE Linux epoch date detection
2013-09-30 20:58:24 +01:00
Daniel Black
b3b62d65bf
ENH: filter.d/uwimap-auth added. Closes #18
2013-09-29 18:06:27 +10:00
Daniel Black
1eeb6e94bd
BF: fix regex for openssh-6.3
2013-09-29 17:28:33 +10:00
Daniel Black
8a458b45bc
TST: dummyjail in own class
2013-09-29 15:57:03 +10:00
Daniel Black
86d3ee5373
TST: py2.5 compatibility - no with
2013-09-29 15:46:15 +10:00
Daniel Black
723ea964a7
TST: failmanager get/sets on FailTotal and MaxTime
2013-09-29 15:12:44 +10:00
Daniel Black
bcc16789d0
TST: test elements of DateTemplate base class
2013-09-29 15:02:38 +10:00
Daniel Black
b576c4718d
TST: add test cases for Actions
2013-09-29 14:52:59 +10:00
Daniel Black
891b436874
TST: more complete Action testing
2013-09-29 14:17:31 +10:00
Yaroslav Halchenko
dcaacad7e3
BF: do not pass dangling symlinks to the server to be monitored
...
This is more of a workaround I guess than a "solution". Ideally server
should be more clever and allow adding symlinks which eventually might
point to existing file. But that is probably would be too much complication
for a rare use case. User on the mailing list informed that then server
does not monitor even other files, thus as a quick workaround -- do not even add dangling links
2013-09-28 22:16:34 -04:00
Yaroslav Halchenko
cf76019cca
TST: that we do receive IOError if trying to feed broken symlink into path to be monitored by server
2013-09-28 21:59:11 -04:00
Daniel Black
8c2a5612ed
DOC: resolve ChangeLog conflicts
2013-09-19 19:38:28 +10:00
Daniel Black
3be7dcd701
DOC: resolve ChangeLog conflicts
2013-09-19 19:23:02 +10:00
Daniel Black
9ce1e33313
TST: pureftpd - everything I've seen suggests that pureftpd only does syslog - even back to 2004. Not sure how this second example came into existance
2013-09-17 22:24:28 +10:00
Daniel Black
ad5fb81f4b
TST: failJSON set match to false on longer supported pam version
2013-09-17 21:18:24 +10:00
Daniel Black
bec723b21d
TST: failJSON date fix
2013-09-17 10:51:48 +10:00
Daniel Black
7e756dfada
TST: correct failJSON for www3.google.com -> www.google.com changes. Disable test case for pre-0.99.2.0 version of linux-pam failure messages
2013-09-17 10:48:09 +10:00
Daniel Black
8f41422262
TST: domains need to exist for fail2ban-regex to work
2013-09-17 10:09:19 +10:00
Daniel Black
ee497ff1cb
ENH: filter mysqld-auth can be a is a syslog based service so anchor it using syslog prefix
2013-09-17 07:57:19 +10:00
Daniel Black
504111b0b1
ENH: filter.d/recidive - anchor regex at start and support f2b SYSLOG target
2013-09-16 01:22:42 +10:00
Yaroslav Halchenko
f1adf75b59
ENH: basic testing for iso8601 code which had no explicit tests + spit out ValueError for incorrect type of input and ParseError otherwise
2013-09-12 23:12:18 -04:00
Daniel Black
317e82e144
TST: one more exim test case
2013-09-02 17:10:49 +10:00
Yaroslav Halchenko
cd100ce274
Merge pull request #342 from grooverdan/datedetector_test
...
TST: improve datedetector error reporting
2013-08-31 06:53:59 -07:00
Daniel Black
6b0e2289d4
Merge pull request #335 from grooverdan/gh-333-bind
...
ENH: filter.d/named-refused.conf - BIND 9.9.3 regex changes. Closes gh-333
2013-08-30 21:34:22 -07:00
Daniel Black
2acaef9d89
TST: more detail in assertion
2013-08-29 09:17:13 +10:00
Daniel Black
f2a60daea1
TST/BF: assertIsNotNone replaced with assertNotEqual for python 2.4 compatibility
2013-08-28 12:55:21 +10:00
Daniel Black
13b4f176ab
TST: improve datedetector error reporting
2013-08-28 12:41:20 +10:00
Daniel Black
cbed57bffd
TST: fix year in named-bind test case
2013-08-28 08:52:56 +10:00
Daniel Black
a401d11644
ENH: add regex for bad zone transfer request/ TST: add test for bind-9.9 zone transfer denied
2013-08-28 00:53:08 +10:00
Yaroslav Halchenko
265a85ec1f
RF: do not catch for now "invalid nonce \S* received - hash is not \S*" -- imho needs more analysis
2013-08-26 09:48:56 -04:00
François Boulogne
e133b9f1d1
MAINT: add support for lightty1.4.31
2013-08-25 21:29:43 +02:00
Daniel Black
ca4729e943
ENH: filter.d/exim.conf - add authentication failures for "plain" authentication
2013-08-25 23:02:10 +10:00
Daniel Black
ef903db3c9
ENH: filter.d/named-refused.conf - BIND 9.9.3 regex changes. Closes gh-333
2013-08-25 22:44:30 +10:00
Daniel Black
cfb7dba268
DOC: merge ChangeLog
2013-08-25 21:26:13 +10:00
Daniel Black
b589533d69
Merge branch 'master' into kwirk-merge
...
Conflicts:
ChangeLog
testcases/files/logs/dropbear
2013-08-25 21:21:14 +10:00
Daniel Black
62c13c15d6
TST: reorder and condense error message for Multiple regexs matched
2013-08-25 21:02:30 +10:00
Daniel Black
9a1df3501b
TST: display details of duplicate matches
2013-08-25 20:19:42 +10:00
Daniel Black
cb61fcd326
TST: standardise output format on Time mismatch test
2013-08-25 18:11:54 +10:00
Daniel Black
8e467437b2
TST: fix year on asctime
2013-08-25 18:09:39 +10:00
Yaroslav Halchenko
c84a2e595a
ENH(BF): put 'standard' template after more detailed ones with day of week and year
...
otherwise years present in the freshly contributed by Dan apache regexes do not match
although should have. I had also to adjust failing now vsftpd test
2013-08-25 17:52:12 +10:00
Daniel Black
21914d155e
TST: add failJSON data
2013-08-25 17:49:09 +10:00
Daniel Black
1d9702be32
TST: datetime mismatch to show error line
2013-08-25 17:34:36 +10:00