Steven Hiscocks
997729e274
BF: Fix complain action for multiple recipients and misplaced ";"
11 years ago
Daniel Black
350d2dfd8e
Merge pull request #618 from kwirk/xt_recent-tweaks
...
ENH: Add root user check in xt_recent, and add missing actionstop
11 years ago
Daniel Black
1276e4d170
Merge pull request #616 from kwirk/maxlines-warning
...
ENH: Warn when multiline regex used when maxlines not greater than 1
11 years ago
Steven Hiscocks
4102f4f8c7
TST: Fix TravisCI build, install of coveralls from pip
11 years ago
Steven Hiscocks
7c76f7f204
BF: $EUID not avilable in all shells, replaced with `id -u` in xt_recent
11 years ago
Steven Hiscocks
2a37ee2fb7
ENH: Add root user check in xt_recent, and add missing actionstop
...
Thanks to Helmut Grohne on IRC for suggestion
11 years ago
Steven Hiscocks
c6fc57d594
TST: Fix TravisCI build for python2.7
11 years ago
Steven Hiscocks
df3e4a2742
ENH: Warn when multiline regex used when maxlines not greater than 1
11 years ago
Steven Hiscocks
5c7630c4be
ENH: Allow separate blacklist category for badips.py action
11 years ago
Steven Hiscocks
cf81ddd8e2
BF: Add error handling in badips.py action
11 years ago
Steven Hiscocks
31f4ea59cb
BF: Use abusix Abuse Contact DB to get more accurate abuse addresses
...
Taken from xarf-login-attack action from 0.9 branch by Daniel Black
11 years ago
Steven Hiscocks
fceac53776
TST: Move nagios log sample to correct folder
11 years ago
Steven Hiscocks
f68d85a6ac
Merge branch 'master' into 0.9
...
Conflicts:
ChangeLog
Spelling correction of 0.8.13 fixed in master
config/jail.conf
Added nagios and duplicate php-url removal in master
Just nagios added, duplicate not issue in 0.9
11 years ago
Steven Hiscocks
9bbf4ea258
BF: Keep sure database errors are captured during Fail2Ban startup
11 years ago
Steven Hiscocks
9bfc77c320
BF: fail2ban-client processCmd ret was being overwritten each loop
11 years ago
Daniel Black
c701ac9276
DOC: document LogLevel requirement for "Connection from" regex"
11 years ago
Steven Hiscocks
0822275295
Merge pull request #613 from grooverdan/more-ssh
...
ENH: ssh filter - "Disconnecting: Too many authentication failures.." ma...
11 years ago
Daniel Black
45157ddc86
TST: fix failJSON for ssh filter change
11 years ago
Steven Hiscocks
1e9910fcb0
ENH: Added traceback for error log on pyinotify callback when in debug
...
Thanks to Helmut Grohne for idea on #fail2ban IRC
11 years ago
Daniel Black
5f4d0ed576
ENH: ssh filter - "Disconnecting: Too many authentication failures.." matching Connection log message
11 years ago
Steven Hiscocks
bda9b7d725
BF: Add handling of exception in pyinotify callback
...
If error isn't handled, no error messages are printed and the jail
ceases to function.
11 years ago
Daniel Black
5177fded7b
Merge pull request #602 from grooverdan/doco-risks-and-limitations
...
DOC: Doco risks and limitations
11 years ago
Daniel Black
fb557761e4
Merge pull request #610 from tecnocat/patch-1
...
BF: Duplicate jail "php-url-fopen"
11 years ago
Aarón Nieves Fernández
993b7d3dfb
Duplicate jail "php-url-fopen"
11 years ago
Steven Hiscocks
a9f0545d8f
BF: Add threading lock to database
11 years ago
Steven Hiscocks
dff8909473
ENH: Add badips.com reporting and blacklisting action (python based)
11 years ago
Steven Hiscocks
3cbfe9b057
BF: `ret` now changed after beautifier called
11 years ago
Steven Hiscocks
530cd53add
BF: Due to python3 bug, importlib.machinery may need explicit import
11 years ago
Yaroslav Halchenko
c424e4032d
DOC: minor - replace tabs with spaces for consistent formatting
11 years ago
Daniel Black
1c740636e3
Merge pull request #603 from truxoft/master
...
ENH: Nagios filter
11 years ago
Ivo Truxa
c207ad6058
removing ignoreip at [nagios]
...
I removed the ignoreip setting from the nagios section. As pointed out, it is redundant here. Nagios server, under normal circumstances should not trigger any access errors, and would be included in the global ignoreips anyway.
11 years ago
Ivo Truxa
f5f434f846
removing the second failregex
...
The second failregex was supposed to catch an error concerning an ACL denial over IPv6, but this message is no more generated by the nrpe version (v2.15) that introduced the IPv6 support, so the first failregex seems to be sufficient.
11 years ago
Daniel Black
338d40f717
Merge pull request #606 from cmarkle/patch-1
...
Correct spelling error in changelog
11 years ago
Chris Markle
20886288e5
Correct spelling error in changelog
...
I know it's a nit but still... ;)
11 years ago
Ivo Truxa
f6ccd8878d
date fix
...
sorry, need to get some glasses
11 years ago
Ivo Truxa
a71bb89ccd
removing a dot (typo)
...
The dot at the ignoregex did not belong there. Somehow it was added during the copying and pasting. Thanks for reporting it, I did not see it. Otherwise, empty ignoregexes are in all filters, and if they are missing, fail2ban client shows warnings when starting the filter, which I prefer avoiding.
11 years ago
Ivo Truxa
a8a43e8f38
ENH: Nagios filter
...
new filter Nagios added
11 years ago
Ivo Truxa
dac4dd465e
ENH: Nagios filter
...
added typical configuration settings for the nagios filter
11 years ago
Ivo Truxa
c91fda8619
ENH: Nagios filter
...
Sample log for the first failregex is available in the testcases. No example available for the IPv6 denial yet.
11 years ago
Ivo Truxa
110b8e6905
ENH: Nagios filter
...
Sample log entry from /var/log/messages for a denied access to the nrpe2 (Nagios Remote Plugin Executor) daemon
11 years ago
Daniel Black
7b56daee8f
DOC: set realistic expectations of what fail2ban protects against
11 years ago
Daniel Black
ef82eac790
DOC: openssh real protection is pubkey
11 years ago
Daniel Black
59b9045e88
MRG: from master 2014-02-02
11 years ago
Daniel Black
1366ea382d
Merge pull request #601 from grooverdan/dovecot-no-lip-tls
...
ENH: dovecot filter enhancements / BF: remove "no auth attempts"
11 years ago
Daniel Black
273b2f45a3
MRG: remove the "no auth attempts" as per aseques gh-600
11 years ago
Daniel Black
9b614ce486
ENH: dovecot filter enhancements
11 years ago
Joan
9c6aab37d6
As suggested by @grooverdan, grouping the tests and making them false to avoid accidentally reenabling them in the future
11 years ago
Joan
aaa86cd10f
As suggested by @grooverdan, grouping the tests and making them false to avoid accidentally reenabling them in the future
11 years ago
Joan
84617fa6da
Fixed a failing case
11 years ago
Joan
08171ba52f
Removed the -no auth attempts- from the triggers because of lots of FP
11 years ago