Edward Beckett
835b3ff483
Update apache-badbots.conf
...
Useragent strings including `+http` need to be escaped to be valid.
9 years ago
weberho
d278fbca30
Fixed line suspected to be faulty
9 years ago
Yaroslav Halchenko
c37009aec7
Merge branch 'grep-m1k' of github.com:szepeviktor/fail2ban
...
* 'grep-m1k' of github.com:szepeviktor/fail2ban:
Limit the number of log lines in *-lines.conf actions
Conflicts:
ChangeLog -- took both versions and adjusted the new one
for -n 1000 change
9 years ago
Yaroslav Halchenko
38c320798d
Merge pull request #1127 from yarikoptic/enh-iptables-w-close-1122
...
WIP ENH Add <lockingopt> (Close : #1122 ) and <iptables> to define the iptables call
9 years ago
Yaroslav Halchenko
0041bc3770
DOC: Changelog for shorewall-ipset-proto6.conf + adjusted its description
9 years ago
Yaroslav Halchenko
de2f9504c0
Merge pull request #978 from ediazrod/patch-2
...
shorewall-ipset-proto6.conf for shorewall
9 years ago
Yaroslav Halchenko
65cd218e10
Merge remote-tracking branch 'origin/master'
...
* origin/master:
ipjailmatches is on one line with its description in man jail.conf
Added a space between IP address and the following colon
9 years ago
Viktor Szépe
c8b3ee10a0
Limit the number of log lines in *-lines.conf actions
9 years ago
Thomas Mayer
a19cb1b2b9
Merge 923d807ef8
into cf2feea987
9 years ago
Yaroslav Halchenko
3c0d7f5a4c
BF: do not wrap iptables into itself. Thanks Lee
9 years ago
Viktor Szépe
ebdfbae559
Added a space between IP address and the following colon
9 years ago
Yaroslav Halchenko
749d3c160c
BF: symbiosis-blacklist-allports now also requires iptables-common.conf
9 years ago
Yaroslav Halchenko
916937bb6a
RF: use <iptables> to take effect of it being a parameter
9 years ago
Yaroslav Halchenko
31dc4e2263
ENH: added lockingopt option for iptables actions, made iptables cmd itself a parameter
9 years ago
Yaroslav Halchenko
7a011fca1b
DOC: adjusted comment in pass2allow-ftp to my suggested wording
10 years ago
Viktor Szépe
948b12e5df
Fixed definition of knocking_url for pass2allow
10 years ago
Viktor Szépe
b638e807ad
Explicitly stating that knocking_url needs to be customized
10 years ago
Viktor Szépe
586703dcc2
Test, changelog and fixes to pass2allow
10 years ago
Viktor Szépe
5b7e1de2f4
Instead of allow-iptables-multiport actions swap blocktype and (new) returntype
10 years ago
Viktor Szépe
5d60700c0c
Added pass2allow (knocking with fail2ban)
10 years ago
Viktor Szépe
a3b8257b73
Add HEAD method verb to apache-badbots, nginx-badbots
10 years ago
Yaroslav Halchenko
8c4c17a880
Merge pull request #1004 from tsabi/fix-lc_time
...
Fix of LC_TIME usage, it should be LC_ALL
10 years ago
Yaroslav Halchenko
e38b4b8cb3
Merge pull request #1051 from leeclemens/bf/roundcube
...
Update regex to work with roundcube 1.0.5 and 1.1.1
10 years ago
Lee Clemens
3e902d7b3a
Define roundcube_errors_log in paths-common.conf
...
Remove from paths-debian
10 years ago
Lee Clemens
fdc3172aec
Fix PEP8 E302 expected 2 blank lines, found X
10 years ago
Lee Clemens
f7444f16b8
Add optional session id prefix for roundcube 1.1.1
10 years ago
Lee Clemens
2796534a5d
Update regex to work with roundcube 1.0.5 on CentOS 6
10 years ago
Viktor Szépe
b65a8b065d
Other actions do not dive into this gory descriptions, but we do.
10 years ago
Viktor Szépe
2063ce4b23
All the arguments must be listed in [Init]
10 years ago
Viktor Szépe
79457112e9
Updated CF action
10 years ago
Yaroslav Halchenko
345820d2aa
Merge pull request #1056 from ipoddubny/asterisk_security_log
...
Fix support for Asterisk security log
10 years ago
Yaroslav Halchenko
f41872f034
Merge pull request #1013 from szepeviktor/patch-4
...
Non-US locale warning for proftpd
10 years ago
Yaroslav Halchenko
eb091d9b8c
Merge remote-tracking branch 'origin/master' into pr-1039
...
* origin/master:
minor: no tripple empty lines
add froxlor-auth filter and jail
add froxlor-auth filter and jail 0
add froxlor-auth filter and jail
BF: Fix fail2ban-regex not parsing journalmatch correctly
10 years ago
Yaroslav Halchenko
8c4d4aa7fb
minor: no tripple empty lines
10 years ago
Joern Muehlencord
4296d1a9a9
add froxlor-auth filter and jail
10 years ago
Joern Muehlencord
964cdb5d9b
add froxlor-auth filter and jail
10 years ago
Ivan Poddubny
7a4e6fa6e5
Asterisk security log: add support for websocket protocol events
...
Thanks to @kcormier.
10 years ago
Ivan Poddubny
988d9a08da
Asterisk security log: accept events containing Response/ExpectedResponse
...
Event containing Challenge may come without ReceivedChallenge, but with
Response and ExpectedResponse.
Also Challenge now accepts '/' character, since it is used at least by PJSIP.
10 years ago
Ivan Poddubny
189265a323
Asterisk security log: accept SessionID of PJSIP events
...
Unlike chan_sip and manager, PJSIP populates SessionID using
Call-Id header of a related SIP message.
As Call-Id of a SIP message can contain almost anything,
the regular expression for SessionID has been loosened.
10 years ago
Ivan Poddubny
ab2ac1a367
Asterisk security log: accept <unknown> in AccountID
10 years ago
Ivan Poddubny
977f9955e7
Asterisk security log: accept EventTV in ISO8601
...
Asterisk uses ISO8601 dates in security log since version 12.
Closes #988
10 years ago
Anton Shestakov
56e5821c06
Match unknown user in dovecot's passwd-file auth database
10 years ago
Aaron Brice
7ae0ef2408
Fix actions in ufw.conf
...
On Ubuntu 15.04 the ufw action was not working.
- With empty <application>, receiving errors:
2015-04-24 16:28:35,204 fail2ban.filter [8527]: INFO [sshd] Found 43.255.190.157
2015-04-24 16:28:35,695 fail2ban.actions [8527]: NOTICE [sshd] Ban 43.255.190.157
2015-04-24 16:28:35,802 fail2ban.action [8527]: ERROR [ -n "" ] && app="app " -- stdout: b''
2015-04-24 16:28:35,803 fail2ban.action [8527]: ERROR [ -n "" ] && app="app " -- stderr: b''
2015-04-24 16:28:35,803 fail2ban.action [8527]: ERROR [ -n "" ] && app="app " -- returned 1
- With action = ufw[application=OpenSSH], it was silently not doing
anything (no errors after "Ban x.x.x.x", but no IP addresses in ufw
status).
Re-arranged the bash commands on two lines, and it works with or without
<application>.
10 years ago
Lee Clemens
8f792f52fb
Add drupal-auth filter and jail
10 years ago
Lee Clemens
b530d88eca
Merge remote-tracking branch 'upstream/master' into bf/1000-asteriskBlocksSelf
...
Conflicts:
ChangeLog
10 years ago
Markus Oesterle
f8c7247f42
added \s after host
10 years ago
Markus Oesterle
5f2807b41f
replaced .* before rhost with regex matching all the previous fields
10 years ago
Markus Oesterle
8825a5f31b
updated filter.d/sshd.conf
...
Added line to match sshd auth errors on OpenSuSE systems
10 years ago
Viktor Szépe
e776a4e1ab
Update proftpd.conf
10 years ago
Viktor Szépe
f9e8a99a79
Non-US locale warning for proftpd
10 years ago