208 Commits (fc4b69a2822b83527e26a9f139ee9403e7ae23bb)

Author	SHA1	Message	Date
Daniel Black	ed2f46759c	MRG: restore accidently deleted pam comment in jail.conf	11 years ago
Daniel Black	7c0efc8ec8	MRG: merge so far - flushLogs not working yet	11 years ago
Steven Hiscocks	f742ed0e4b	DOC: when to use blocklist.de reporting ... Taken from commit 1846056606	11 years ago
Steven Hiscocks	e810ec009d	ENH: Added blocklist.de reporting API action	11 years ago
Daniel Black	1846056606	DOC: when to use xarf messages to network owner	11 years ago
Daniel Black	bfd435091d	ENH: jail examples for xarf-login-attack	11 years ago
Daniel Black	04438cd1a1	BF/ENH: mysql jail - rename to mysql-syslog to be consistent with 0.8.13. Add port to syslog defination. Document mysql configuration required for mysql jails	11 years ago
Daniel Black	3f4d179612	BF: smtps not an IANA port - from #447	11 years ago
Daniel Black	fe9e077acf	BF: correct spelling of port for solid-pop3 jail in jail.conf	11 years ago
Yaroslav Halchenko	25e967f23b	Merge branch 'mysqld-syslog-iptables-name-too-long' of https://github.com/grooverdan/fail2ban ... * 'mysqld-syslog-iptables-name-too-long' of https://github.com/grooverdan/fail2ban: BF: jail name mysqld-syslog-iptables too long. removed -iptables. Thanks Stefan (#447) Conflicts: ChangeLog	11 years ago
Daniel Black	b9b2ddf996	BF: smtps not IANA standard. Closes #447	11 years ago
Daniel Black	cade746307	BF: jail name mysqld-syslog-iptables too long. removed -iptables. Thanks Stefan (#447)	11 years ago
Daniel Black	13223c33f5	MRG: recidive-protocol-all	11 years ago
Daniel Black	98eacdf333	MRG/BF: merge from master. Fix bugs in iso8601	11 years ago
Daniel Black	dab2ddb9da	ENH: recidive jail to block all protocols. Closes #440	11 years ago
Daniel Black	b3b9ea4559	ENH: jail for solid-pop3d	11 years ago
Daniel Black	1ac7b53cad	MRG: merge from master	11 years ago
Daniel Black	ab9d921162	BF: missed action in nginx-http-auth	11 years ago
Daniel Black	a148d35d70	ENH: add filter.d/nginx-http-auth. Partially forfills #405	11 years ago
Daniel Black	cb982ef921	ENH: multiline filter for sendmail-spam. Closes gh-418	11 years ago
Daniel Black	47d35c9d80	MRG: 0.8.11 to 0.9 ... Epnoc of selinux is now true UTC Merge multiline support and date detection in filter	11 years ago
Daniel Black	93de46ac72	BF: maxretry=5 for ssh as per DEVELOP. align = in jail.conf	11 years ago
Daniel Black	de9977441a	DOC: move named and mysql instructions into the filters from jail.conf	11 years ago
Daniel Black	7ab909d056	DOC: space out jail.conf consistantly	11 years ago
Daniel Black	95f3f38682	MRG: merge ChangeLog and jail.conf	11 years ago
Daniel Black	e3150044fd	BF: fix selinux ... TST: ignore *common.conf files in test cases as these are included BF: Remove USER_LOGIN from selinux-ssh as its a duplicate message ENH: add sample jail.conf	11 years ago
Daniel Black	a991adb83f	ENH: add submission, smtps and sieve to blocked ports since this also typically rely on dovecot auth	11 years ago
Daniel Black	8412303131	ENH: dovecot jail examples	11 years ago
Daniel Black	0c14707201	ENH: add dovecot jail	11 years ago
Daniel Black	b61fe0f12d	Merge pull request #378 from grooverdan/sasl ... ENH: filter.d/postfix-sasl - anchor regex at start and rename from filter.d/sasl	11 years ago
Daniel Black	4ecc063bd0	ENH: rename filter.d/sasl -> filter.d/postfix-sasl	11 years ago
Daniel Black	123ad1cc9c	MRG: Merge branch 'asterisk-common-jail'	11 years ago
Daniel Black	8421007f32	MRG: merge man/jail.conf.5 entries	11 years ago
Daniel Black	8fe542ca9f	DOC: reintroduce comment on comments	11 years ago
Daniel Black	6b6169178f	ENH: mysql syslog jail.conf base	11 years ago
Daniel Black	ee58696531	DOC: try to encourage jail.local jail.d/*.local a lot more	11 years ago
Daniel Black	6ef33981e3	ENH: new asterisk jail to replace asterisk-(tcp|udp) (now that gh-37 is fixed)	11 years ago
Daniel Black	2d1bd54439	Merge pull request #379 from grooverdan/webmin ... ENH: filter.d/webmin anchor at start and use syslog	11 years ago
Daniel Black	2a1d629d88	BF: webmin -> webmin-auth	11 years ago
Daniel Black	ab457acc4d	BF: fix name in action for uwimap-auth	11 years ago
Daniel Black	0beea03914	ENH: jail.conf example for webmin	11 years ago
Daniel Black	5a2623f0df	ENH: reorder osx-ipfw jail defination to near the other ssh examples	11 years ago
Daniel Black	359210f224	ENH: filter.d/squirrelmail added	11 years ago
Daniel Black	b3b62d65bf	ENH: filter.d/uwimap-auth added. Closes #18	11 years ago
Daniel Black	e12d389c65	MRG/DOC: jail.conf resolution, ChangeLog fixes	11 years ago
Daniel Black	74434694dc	BF: more duplicate jail.conf entries - 3proxy exim{,-spam}, perdition	11 years ago
Daniel Black	5cf25a63df	BF: remove duplicate ssh-pf in jail.conf	11 years ago
Mark McKinstry	4187e87b69	don't enabel ssh-apf jail by default	11 years ago
Mark McKinstry	f9f4d2728f	add an example jail for apf action and ssh filter	11 years ago
Daniel Black	9805d39b60	MRG: merge date changes to support timezones	11 years ago
Daniel Black	1f1a56174f	MRG: merge from master	11 years ago
Daniel Black	b31799a322	ENH: add action.d/osx-afctl anonymously contributed on f2b wiki	11 years ago
Daniel Black	808aa1a792	ENH: added jail.conf example. closes gh-340	11 years ago
Daniel Black	b589533d69	Merge branch 'master' into kwirk-merge ... Conflicts: ChangeLog testcases/files/logs/dropbear	11 years ago
Daniel Black	d5291517a7	MISC: merge from master	12 years ago
Daniel Black	56faf7f5ad	DOC: fix ChangeLog merge	12 years ago
Daniel Black	8f532f9148	NIT: space remove	12 years ago
Steven Hiscocks	8b9bafda79	ENH: Change lighttpd-fastcgi to suhosin, and improve regex and samples ... suhosin is hardened php implmentation, which will log the alerts (as seen in samples) to stderr, which is picked up by fastcgi webserver (e.g. lighttpd, apache, nginx)	12 years ago
Daniel Black	6fdfd8d356	BF: fix port	12 years ago
Daniel Black	eea5b071e6	ENH: jail for perdition	12 years ago
Steven Hiscocks	1eea0dcec8	Merge branch 'master' into 0.9 ... Conflicts: ChangeLog bin/fail2ban-regex bin/fail2ban-testcases config/jail.conf fail2ban/server/failregex.py fail2ban/server/filter.py fail2ban/tests/files/logs/lighttpd fail2ban/tests/files/logs/mysqld.log fail2ban/tests/files/logs/wu-ftpd fail2ban/tests/filtertestcase.py fail2ban/tests/utils.py testcases/files/logs/lighttpd testcases/files/logs/lighttpd-auth testcases/files/logs/mysqld-auth testcases/files/logs/mysqld.log testcases/files/logs/wu-ftpd testcases/files/logs/wuftpd	12 years ago
Daniel Black	ab10664b57	ENH: action.d/hostsdeny to take daemon_list arguement as suggested in README.Solaris	12 years ago
Steven Hiscocks	606e97683b	BF: jail.conf multiport actions previously using single port iptables	12 years ago
Daniel Black	5412d7336f	DOC: ChangeLog confict	12 years ago
Yaroslav Halchenko	04b8069cee	ENH: adjust sendmail-whois 'active' example to have also sendername in it	12 years ago
Alexander Dietrich	2155f6bfa5	Update ChangeLog and jail.conf example	12 years ago
Daniel Black	d6dece4900	ENH: Split log and provide jail examples	12 years ago
Yaroslav Halchenko	70ae1ed68b	ENH: ban also submission port (587) for all smtp-related jails ... see http://www.rfc-editor.org/rfc/rfc4409.txt and http://en.wikipedia.org/wiki/Mail_submission_agent Users of advanced setups might like to split those into multiple jails anyways to have separate control over submission agents and incoming mail servers.	12 years ago
Steven Hiscocks	5ca6a9aeb6	Merge branch 'systemd-journal' into 0.9 ... Conflicts: bin/fail2ban-regex config/filter.d/sshd.conf Closes github #224	12 years ago
Yaroslav Halchenko	8487cb2e90	Merge commit '0.8.10-31-g1ab0f0f' into 0.9 ... * commit '0.8.10-31-g1ab0f0f': (24 commits) BF/ENH: Incorrect authentication data doesn't need tailier so that's optional. Also gained log entry for Unrouteable address ENH: readibility thanks to Yaroslav DOC: Changelog for fail2ban-regex RF DOC: Changelog for asterisk hardening ENH: fail2ban-regex -- add specification of loglevels to enable RF: reworked -regex cmdline tool to use optparse, some unification and enhancement of outputs ENH: 'heavydebug' level == 5 for even more debugging in tricky cases ENH: asterisk -- use \S instead of [^:] + prefix failregex with ^\[ BF: missed a space BF: [SSL-out] is optional in assp ENH: regex hardening on assp ENH: anchor a bit mor. Use \d and \w where possible. Escape a literal . TST: attempts at injection with username=rhost=1.2.3.4 have no user= logged in dovecot-1.2.15 ENH: proftpd chan accept usernames with spaces ENH: injection of fail data into USER field ENH: dovecot regexs rewritten and extra failures ENH: proftp regex hardening and log messages ENH/BF: exim improvements with sample BF: fix to proxy port in 3proxy example ENH: sample log + more specific regex ... Conflicts: -- it was a messy merge/resolution. ChangeLog bin/fail2ban-regex fail2ban-testcases fail2ban/server/filter.py	12 years ago
Daniel Black	88b4598ed8	BF: fix to proxy port in 3proxy example	12 years ago
Daniel Black	16d63434ef	DOC: credits	12 years ago
Yaroslav Halchenko	d2b1c73b92	CFG: assure actions for all the jails	12 years ago
Yaroslav Halchenko	f5a8a8ac7c	Release 0.8.9 ... -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iEYEABECAAYFAlGRBZ8ACgkQjRFFY3XAJMhqzwCgvUsrv6cSjo1d8YCQUA8Na0Kk 44QAoKk7X2sqFM+wvj2vK3stsHa/80qm =iBfR -----END PGP SIGNATURE----- Merge tag '0.8.9' into 0.9 (quite a bit of conflicts "resolved") Release 0.8.9 * tag '0.8.9': BF: add missing files to MANIFEST (I think we shoult not rely on sdist anyways -- 'git tag' tarballs are more thorough ;) ) All the (version) updates for the release of 0.8.9 BF: (travis) relax the test for needed to be presented installed directories -- allow new BF: (travis) if tests ran under coverage -- there is a traceback parts to report (thus > would be present) ENH: also print the failing traceback line in case of failure ENH: include explicit list of new files which should not be there upon "install --root" ENH: now we know that logging handlers closing was still buggy in 2.6.2 ENH: issue a warning if jail name is longer than 19 symbols (Close #222) DOC: inline commends with ';' are in effect only if ';' follows as space BF: Fix for filterpoll incorrectly checking for jailless state ENH: strengthen detection of working pyinotify ENH: use the same python executable for setup.py test ENH: actually tune up TraceBack to determine "unittest" portions of the stack across all python releases TST: Some primarily smoke tests for tests utils TST: cover few more lines in fail2banreader.py ENH: basic test for setup.py itself (when applicable, should greatly improve coverage ;) ) ENH: consistent operation of formatExceptionInfo + unittest for it ENH: point to the status of master branch on travis Conflicts: ChangeLog MANIFEST README.md fail2ban/version.py -- all of the above obvious version changes below files primarily needed just a bit of help in resolution config/jail.conf fail2ban/server/filterpoll.py fail2ban/server/server.py fail2ban/tests/servertestcase.py and following were more difficult -- git wasn't able to track renames/moves of the code fail2ban-testcases -- needed to introduce those changes to tests/utils.py testcases/clientreadertestcase.py -- manually applied patch from master testcases/utils.py -- manually applied patch from master	12 years ago
Yaroslav Halchenko	90b8433ac5	DOC: inline commends with ';' are in effect only if ';' follows as space	12 years ago
Steven Hiscocks	f7d328195f	NF: Add systemd journal backend	12 years ago
Yaroslav Halchenko	f1b6806eb4	Merge branch 'master' into 0.9 ... * master: (51 commits) ENH: Use real (resolving) example.com instead of test.example.com DOC: Slight tune ups to ChangeLog -- we must release! Changelog entries for the latest merges BF: add bash-completion to MANIFEST DOC: ChangeLog for default action type change ENH: consolidate where blocktype is defined for iptables rules BF: default type to unreachable ENH: separate out regex and escape a . ENH: logs/sshd -- have ":" after [daemon] (other uses are uncommon) ENH: logs/sshd -- use example.com as the resolved hostname in sample log lines ENH: filter.d/sshd.conf -- allow for trailing "via IP" in logs DOC: Drop sudo from bash-completion DOC: Added bash-completion script ENH: add blocktype to all relevant actions. Also default the rejection to a ICMP reject rather than a drop ENH: Removed unused log line ENH: logrotate file BF: missed MANIFEST include BF: missed MANIFEST include BF: missed MANIFEST include ENH: some form of logrotate based on what distros are doing ... Conflicts: ChangeLog MANIFEST client/actionreader.py config/jail.conf fail2ban/server/datedetector.py fail2ban/tests/datedetectortestcase.py	12 years ago
Yaroslav Halchenko	5accc10a47	Merge pull request #206 from grooverdan/bsd_ipfw ... NF: BSD ipfw	12 years ago
Daniel Black	aa52743f52	DOC: add jail.conf entry for pf	12 years ago
Daniel Black	b6d0e8ad9c	ENH: add ipfw rule for bsd using the tables.	12 years ago
Enrico Labedzki	07aee8cd33	as daniel desires	12 years ago
Enrico Labedzki	24a8d07c20	added new date format support for ASSP SMTP Proxy	12 years ago
Steven Hiscocks	f196709be1	ENH: Update asterisk example jail.conf entry for multiaction	12 years ago
Yaroslav Halchenko	62602a9ed0	Revert "ENH: by default enable a single jail -- sshd" ... This reverts commit 47a62b6072. Enabling any jail by default should be a prerogative of particular distributions (thanks Fabian Wenk for the discussion) Conflicts: config/jail.conf	12 years ago
Yaroslav Halchenko	1d72a8265d	Merge branch '0.9' into _tent/jail.conf ... * 0.9: BF: usedns deals with forward (not reverse) DNS lookups (thanks Steven Hiscocks) Conflicts: config/jail.conf	12 years ago
Yaroslav Halchenko	2a48b0ab54	Merge branch 'master' into 0.9 ... * master: BF: usedns deals with forward (not reverse) DNS lookups (thanks Steven Hiscocks)	12 years ago
Yaroslav Halchenko	22f04677b6	BF: usedns deals with forward (not reverse) DNS lookups (thanks Steven Hiscocks)	12 years ago
Yaroslav Halchenko	87bac37139	ENH: default port to all ports (0:65535) + remove where thus not needed + typos	12 years ago
Yaroslav Halchenko	f4a74d8d8b	RF: rename/unify naming of courier filters/jails	12 years ago
Yaroslav Halchenko	47a62b6072	ENH: by default enable a single jail -- sshd	12 years ago
Yaroslav Halchenko	3ba540eca3	ENH+BF: use %(__name__) by default for filter, defined enabled = false by DEFAULT ... Now jail.conf is really neat. BF: tests	12 years ago
Yaroslav Halchenko	24e4cfe1b7	Merge branch '0.9' into _tent/jail.conf ... * 0.9: (45 commits) Beef up changelog for 0.9 ENH: make fail2ban-regex aware of possible maxlines in the filter config file BF+TST: Correctly reset time in tearDownMyTime ENH: Reimplement warning suppression of setup.py test --quiet ENH: Renamed OptionConfigReader to DefinitionInitConfigReader ENH: Rename splitAction to extractOptions in jailreader ENH: Use os.path.join for filter/action config readers BF: Remove warnings handler which breaks setup.py python2<2.7 and python3<3.2 ENH: For python3.2+ use ConfigPaser which replaces SafeConfigParser TST: Change depreciated unittest assertEquals method to assertEqual TST: Ensure files are closed in tests to remove ResourceWarnings BF: Change logging instance logSys `warn` method to `warning` ENH: use os.path.join for consistency -- add "Contributors" to authors RF: setup.py now imports version number again DOC: tune up formatting (spaces) and prelude for the changelog entry TST+RF: Add ability to execute test from setup.py with setuptools TST: Move test gathering to function is test utils TST: Move test TZ changes to setUp and tearDown methods ENH: Remove redundant `maxlines` option from jail reader TST: Add test for FilterReader [Init] `maxlines` override ... Conflicts: config/jail.conf	12 years ago
Steven Hiscocks	9672e44d39	ENH: Move jail `maxlines` to filter config	12 years ago
Yaroslav Halchenko	4665ac6b27	RF: jail.conf with entries from Debian's copy and changing existing ones to conform the "template" ... our unittests fail now -- will BF later	12 years ago
Yaroslav Halchenko	4869186c8f	Merge branch 'py3' of https://github.com/kwirk/fail2ban into 0.9 ... * 'py3' of https://github.com/kwirk/fail2ban: (38 commits) DOC: Add python3 to requirements ENH: Clarify use of bytes in csocket and asyncserver for python3 DOC: Revert dnsToIp error change, seperate log message for socket.error TST: Tweak python3 open statement to resolve python2.5 SyntaxError TST: Revert changes for filter testcase open statement DOC: Revert setup.py messages to use print statement Add *.bak files generated by 2to3 to gitignore TST: Fix up fail2ban python3 scripts TST: Fix issues in tests which assumed dictionary's order ENH: setup.py now automatically runs 2to3 for python3.x TST: Remove Travis CI unsupported versions of python from Travis config add fail2ban-2to3 to MANIFEST file ENH: Add python3 versions to Travis CI config BF: Handle expected errors for python3.{0,1} when changing log target Minor tweaks to fail2ban-regex for encoding Added ability to set log file encoding with fail2ban-regex Add ability to set log encoding for jail Move handling of unicode decoding to FileContainer readline Fix incorrect exit code from fail2ban-2to3 Remove redundant reassignment of variable ... Conflicts: fail2ban/tests/servertestcase.py -- both branches added a new unittest at the same point	12 years ago
Yaroslav Halchenko	f5572c8ade	Merge pull request #173 from kwirk/maxlines ... Maxlines jail setting tweaks	12 years ago
Steven Hiscocks	4d80fad874	ENH+DOC: Add Guacamole filter, example log and jail	12 years ago
Steven Hiscocks	183cfa6e00	ENH: Default maxlines value in jail.conf, and verify value is int >0	12 years ago
Steven Hiscocks	fa0f8f9e6d	Merge branch '0.9' into py3 ... Conflicts: .travis.yml MANIFEST bin/fail2ban-regex fail2ban/server/filter.py fail2ban/tests/servertestcase.py setup.py	12 years ago
Yaroslav Halchenko	99a5d78e37	ENH: for consistency (and future expansion ;)) -- rename to mysqld-auth	12 years ago