Serg G. Brester
0effe76971
Merge pull request #1370 from theDogOfPavlov/patch-1
...
Added regex for LDAP authentication failures
2016-03-25 15:30:39 +01:00
Serg G. Brester
fad4121709
Merge pull request #1365 from jblachly/sshd-pam-failed
...
SmartOS PAM Authentication failed (not failURE)
2016-03-24 13:47:49 +01:00
jblachly
e9202fa0b2
Placed failure (illumos) at end of regex
2016-03-24 00:43:15 -04:00
theDogOfPavlov
33ef2311e7
added tests to cover exim regex additions
2016-03-23 11:58:03 +00:00
theDogOfPavlov
28e246b5d7
added note to cover additional exim filters
2016-03-23 11:52:09 +00:00
theDogOfPavlov
42f43d0f8a
added note to cover dovecot ldap regex
2016-03-23 11:51:12 +00:00
theDogOfPavlov
eaf6bbb08f
add test to catch LDAP auth failures
2016-03-23 11:47:31 +00:00
theDogOfPavlov
fe1475be95
Additional exim regexes to cover common attacks...
2016-03-21 05:59:59 +00:00
theDogOfPavlov
cf2aa9c1c0
Added regex for LDAP authentication failures
2016-03-21 05:53:23 +00:00
jblachly
25c2334bc8
SmartOS PAM Authentication failed (not failURE)
...
SmartOS (and likely other Illumos platforms) enter log entries for failed sshd logins of the form:
`Authentication failed for USER from HOST`
The current sshd.conf regex matches `failure` -- add to this a match for `failed` to support Illumos
2016-03-16 13:52:01 -04:00
Yaroslav Halchenko
bfac42eb2e
changelog for journalmatch pure-ftpd
2016-03-14 11:10:28 -04:00
Yaroslav Halchenko
86024f745b
Merge pull request #1362 from weberhofer/patch-2
...
define journalmatch setting for pure-ftps
2016-03-14 11:09:16 -04:00
Johannes Weberhofer
bd25a43417
define journalmatch setting for pure-ftps
2016-03-11 18:19:53 +01:00
sebres
74b88e1706
fix sporadic bugs by starting of fast actions (execute fast sub processes), cherry picked from "f2b-perfom-prepare-716-cs":
...
- missing `popen` variable if not started;
- better readability for stdout and stderr in log (+ check log level before do logging);
2016-03-10 15:10:26 +01:00
sebres
01b379ab2e
fix sporadic bugs within asyncserver, cherry picked from "f2b-perfom-prepare-716-cs":
...
- differentiate between in loop and active (reset active only after really leaves a loop);
- differentiate between foreign and self loop-thread by stop/close connection;
- stops logging connection errors if too many errors;
- safe remove socket (no sporadic errors if too fast start/stop occurred);
2016-03-10 15:09:54 +01:00
Yaroslav Halchenko
eed1a0d686
BF: Include iptables-common (not removed iptables-blocktype) within firewallcmd- actions ( Closes #1254 )
2016-03-09 23:06:59 -05:00
Yaroslav Halchenko
deca0b80ab
ENH: removed double tab indentation, pass use_poll into loop, reorderd log msg to come after action to be factually correct
2016-03-09 22:22:29 -05:00
Yaroslav Halchenko
c84b6370c5
ENH: remove some code duplication, enhance docstrings, uniformize naming
2016-03-09 22:22:29 -05:00
Yaroslav Halchenko
7eafb0c206
ENH: avoid subclassing dict (in favor of delegating) if not entire interface is used/adjusted
...
since otherwise use of dict"s __getitem__ could lead to undesired effects etc
2016-03-09 22:22:29 -05:00
Orion Poplawski
f3f813a925
- mysqld does not log login attempts to the journal.
...
- Add /var/log/mysqld.log to mysql_log
2016-03-09 13:52:50 -07:00
sebres
9d13bb0c3a
ChangeLog and THANKS entries
2016-03-09 20:11:14 +01:00
sebres
37c9075fad
fixed monit filter: failregex find now both previous and new versions:
...
- failregex of previous monit version merged as single expression;
- extended failregex with new monit "access denied" version;
2016-03-09 20:06:14 +01:00
Orion Poplawski
dfc65018da
Fedora use mariadb by default, fix log path
2016-03-09 11:36:06 -07:00
Yaroslav Halchenko
d533c0761d
Merge pull request #1349 from yarikoptic/bf-tests-use-configdir
...
BF: use tests.utils.CONFIG_DIR instead of fixed one (Closes #1348 )
2016-03-08 09:11:34 -05:00
Yaroslav Halchenko
634e68036e
Get ready for further developments
2016-03-08 08:36:29 -05:00
Yaroslav Halchenko
bb0dc17a87
BF: use tests.utils.CONFIG_DIR instead of fixed one ( Closes #1348 )
2016-03-07 22:40:36 -05:00
Yaroslav Halchenko
0298ba2c1b
MANIFEST RELEASE and man pages updates
2016-03-07 21:50:10 -05:00
Yaroslav Halchenko
5ffc15ac68
Changes for the 0.9.4 release
2016-03-07 21:45:44 -05:00
sebres
d7e7b52013
Merge remote-tracking branch 'remotes/gh-upstream/master' into f2b-perfom-prepare-716
2016-03-07 19:11:36 +01:00
Yaroslav Halchenko
150007b128
Merge pull request #1345 from sebres/dd-epoch-time-fix
...
datedetector: epoch time expression fix
2016-03-07 13:05:11 -05:00
sebres
e075815833
datedetector: epoch time expression fix (now 10-11 chars, only whole number - anchored ^...\b or by special case within [], audit()) + test cases extended (positive/negative)
2016-03-07 17:57:22 +01:00
sebres
dca3db941e
merge getTime2 functionality to getTime
2016-03-07 17:28:37 +01:00
Yaroslav Halchenko
19850d71e9
changelog about gentoo initd
2016-03-07 10:52:47 -05:00
Yaroslav Halchenko
5106b5943a
Merge pull request #1322 from jsuter1/master
...
gentoo-initd: Use start-stop-daemon in order to handle crashes better
2016-03-07 10:51:14 -05:00
Yaroslav Halchenko
385b50e4a9
Merge pull request #1343 from denics/master
...
adding wp-admin to bot search
2016-03-07 10:23:37 -05:00
Yaroslav Halchenko
ec54b74921
Merge pull request #1338 from yarikoptic/enh-return-mysql-suffix-back
...
Enh return mysql suffix back
2016-03-07 10:21:26 -05:00
sebres
1ec6782f32
fix test cases by testing with multi-threaded execution (wait for threaded execution done)
2016-03-06 18:37:52 +01:00
sebres
bf0adc1fdf
Merge remote-tracking branch 'f2b-perfom-prepare-716-cs' into ban-time-incr (+ conflicts resolved)
2016-03-06 15:12:48 +01:00
Denix
ed0e572bfc
added wp-admin
...
bot are very annoying and I am getting a lot of checks on wp-admin. This should calm them.
2016-03-02 16:52:03 +01:00
Denix
04e932baa2
Merge pull request #1 from fail2ban/master
...
sync fork
2016-03-02 16:48:51 +01:00
Yaroslav Halchenko
a11c878fb2
ENH(TST): a hypothetical example to show/test needing trailing anchoring
2016-02-28 12:12:36 -05:00
Yaroslav Halchenko
6ffbc1ffad
ENH: revert back to having detailed suffix anchored at the end for mysqld-auto.conf
...
As discussed in https://github.com/fail2ban/fail2ban/pull/1333#discussion_r54100127
2016-02-28 12:07:46 -05:00
Yaroslav Halchenko
2adf5855ac
Changelog for the recent PR and added Tom to THANKS
2016-02-28 12:03:13 -05:00
Yaroslav Halchenko
3e31145c33
Merge pull request #1331 from whyscream/postfix-multi-instance-support
...
Add support for matching postfix multi-instance daemon names by default
2016-02-28 12:00:24 -05:00
sebres
667785b608
mysqld: failregex fixed (accepts different log level, more secure expression now);
...
closes #1332
2016-02-24 17:17:51 +01:00
Tom Hendrikx
6c606cf98f
Add support for matching postfix multi-instance daemon names by default
2016-02-23 20:23:04 +01:00
Yaroslav Halchenko
bd822d02a4
DOC: removed Nick from listed as FreeBSD maintainer
2016-02-22 09:13:30 -05:00
Yaroslav Halchenko
8b00ca2744
Merge pull request #1327 from yarikoptic/enh-cov-templates
...
ENH: use codecov + templates for PRs and issues
2016-02-21 09:56:17 -05:00
Yaroslav Halchenko
705b91e6a7
DOC: adjusted ISSUE_TEMPLATE.md picking on @sebres's version
2016-02-20 11:20:33 -05:00
Yaroslav Halchenko
9667c4cb42
ENH: github templates for issues and PRs
2016-02-17 21:20:51 -05:00