mirror of https://github.com/fail2ban/fail2ban
378 lines
14 KiB
Plaintext
378 lines
14 KiB
Plaintext
fail2ban (0.7.3-1) UNRELEASED; urgency=low
|
|
|
|
* New upstream release
|
|
|
|
-- Yaroslav Halchenko <debian@onerussian.com> Thu, 28 Sep 2006 22:17:16 -0400
|
|
|
|
fail2ban (0.7.1-0.2) experimental; urgency=low
|
|
|
|
* New upstream release (closes: #370095,#366307)
|
|
|
|
-- Yaroslav Halchenko <debian@onerussian.com> Tue, 5 Sep 2006 00:26:08 -0400
|
|
|
|
fail2ban (0.6.1-11) unstable; urgency=low
|
|
|
|
* Adjusted manpage for fail2ban.conf to point to shipped examples of
|
|
configuration files as the source of details about available configuration
|
|
options (closes: #382403)
|
|
* Changes in man/fail2ban.conf.5 are managed via dpatch now
|
|
|
|
-- Yaroslav Halchenko <debian@onerussian.com> Wed, 16 Aug 2006 00:18:59 +0300
|
|
|
|
fail2ban (0.6.1-10) unstable; urgency=low
|
|
|
|
* Adjusted to comply with recent changes in debian python policy and use
|
|
pycentral to byte compile modules
|
|
* Filtered out empty entries for ignoreip to reduce confusing WARNING log
|
|
message
|
|
* Added configuration parameter "locale" to specify LC_TIME for time
|
|
pattern matching (closes: #367990,363391)
|
|
* Verbosity is chosen to be max between cmdline parameters and config file
|
|
|
|
-- Yaroslav Halchenko <debian@onerussian.com> Thu, 6 Jul 2006 20:19:54 -0400
|
|
|
|
fail2ban (0.6.1-9) unstable; urgency=low
|
|
|
|
* Adjusted rm commands in init script to don't use -r for removal of
|
|
the pidfile (thanks Stephen Gran)
|
|
* Added clarification about multiport banning to README.Debian
|
|
(closes: #373592)
|
|
|
|
-- Yaroslav Halchenko <debian@onerussian.com> Wed, 14 Jun 2006 12:05:44 -0400
|
|
|
|
fail2ban (0.6.1-8) unstable; urgency=low
|
|
|
|
* Removed bashism (arrays) from init.d script to make it POSIX shell
|
|
complient (closes: #368218)
|
|
* Added new proftpd section
|
|
* Added new saslauthd section. Thanks to martin f krafft
|
|
<madduck@debian.org> (closes: #369483)
|
|
* Mentioned apache2 log file in Other. comment field for FILE in
|
|
apache section. Nothing has to be changed besides the logfile path to
|
|
work with apache2 (closes: #342144)
|
|
|
|
-- Yaroslav Halchenko <debian@onerussian.com> Mon, 22 May 2006 15:37:17 -0400
|
|
|
|
fail2ban (0.6.1-5) unstable; urgency=low
|
|
|
|
* Further fixed debian packaging: to comply with policy empty target
|
|
binary-arch was provided
|
|
|
|
-- Yaroslav Halchenko <debian@onerussian.com> Tue, 16 May 2006 16:43:37 -0400
|
|
|
|
fail2ban (0.6.1-4) unstable; urgency=low
|
|
|
|
* Adjusted debian packaging:
|
|
- Clean up of debian/rules: removed commented out dh_ scripts which
|
|
definetly will never be used
|
|
- debhelper and dpatch moved to Build-Depends
|
|
- added --no-compile for python setup.py install, and removed explicit
|
|
cleaning of .pyc's
|
|
- fixed separation binary-indep and binary-arch in debian/rules
|
|
- restricted depends on python >= 2.3
|
|
|
|
-- Yaroslav Halchenko <debian@onerussian.com> Tue, 16 May 2006 15:53:06 -0400
|
|
|
|
fail2ban (0.6.1-3) unstable; urgency=low
|
|
|
|
* Fixed vsftpd failregexp (closes: #366687)
|
|
* Started to use dpatch
|
|
|
|
-- Yaroslav Halchenko <debian@onerussian.com> Wed, 10 May 2006 11:45:57 -0400
|
|
|
|
fail2ban (0.6.1-2) unstable; urgency=low
|
|
|
|
* Assigned maxreinits to 1000 to be reasonable since otherwise logfile grows
|
|
indefinetly if there is a real problem on the system (closes: #359218)
|
|
* Adjusted debian/{copyright,watch}
|
|
* New version of init.d script (Thanks to Aaron Isotton) (closes: #364278)
|
|
|
|
-- Yaroslav Halchenko <debian@onerussian.com> Mon, 27 Mar 2006 12:55:39 -0500
|
|
|
|
fail2ban (0.6.1-1) unstable; urgency=low
|
|
|
|
* New upstream release
|
|
* In config file added fwchain to ease switching to another input chain
|
|
(closes: #357164)
|
|
|
|
-- Yaroslav Halchenko <debian@onerussian.com> Sat, 18 Mar 2006 23:11:53 -0500
|
|
|
|
fail2ban (0.6.0-8) unstable; urgency=low
|
|
|
|
* Minor adjustments to reduce the deviation from the upstream code
|
|
|
|
-- Yaroslav Halchenko <debian@onerussian.com> Sat, 11 Mar 2006 00:48:14 -0500
|
|
|
|
fail2ban (0.6.0-7) unstable; urgency=low
|
|
|
|
* Fixed a typo in failregex for SSH section (closes: #356112)
|
|
|
|
-- Yaroslav Halchenko <debian@onerussian.com> Thu, 9 Mar 2006 15:13:48 -0500
|
|
|
|
fail2ban (0.6.0-6) unstable; urgency=low
|
|
|
|
* Updated README.Debian with information about some cases with
|
|
not-as-shipped configurations of sshd on the boxes running older versions
|
|
of openssh server
|
|
* Included regexps for SSH in case iff authentication as root using keys was
|
|
attempted whenever PermitRootLogin is set to something else than "yes" and
|
|
key authentication fails
|
|
* Included postrm script to remove log files during purge to comply with
|
|
policy 10.8 (closes: #355443)
|
|
|
|
-- Yaroslav Halchenko <debian@onerussian.com> Fri, 3 Mar 2006 16:32:38 -0500
|
|
|
|
fail2ban (0.6.0-5) unstable; urgency=low
|
|
|
|
* Fixed Apache section: changed filepath to point at error.log, thus I had
|
|
to revert timeregex and timepattern to user RFC 2822 format (closes:
|
|
#354346)
|
|
|
|
-- Yaroslav Halchenko <debian@onerussian.com> Sat, 25 Feb 2006 19:56:46 -0500
|
|
|
|
fail2ban (0.6.0-4) unstable; urgency=low
|
|
|
|
* Modifications in README.Debian to reflect a "finding" on
|
|
not-AllowedUsers banning which requires default Debian configuration
|
|
of "ChallengeResponseAuthentication no" and "PasswordAuthentication
|
|
yes"
|
|
* Fixed Apache timeregex and timepattern to confirm
|
|
the fomat of time stamp used in Debian's acccess.log (error.log uses
|
|
RFC 2822 format)
|
|
* Added section ApacheAttacks to specify some common patterns of attacks on
|
|
a webserver (awstats.pl as a try). This section stays split from Apache
|
|
since it is of different nature and might be not appropriate for some
|
|
users
|
|
* Forced owner/permissions of log file to be root:adm/640 in postinst and
|
|
logrotate (closes: #352053)
|
|
|
|
-- Yaroslav Halchenko <debian@onerussian.com> Mon, 16 Jan 2006 04:05:19 -0500
|
|
|
|
fail2ban (0.6.0-3) unstable; urgency=low
|
|
|
|
* ignoreip is now empty by default (closes: #347766)
|
|
* increased verbosity in verbose=2 mode: now prints options accepted
|
|
from the config file
|
|
* to make fail2ban.conf more compact, thus to improve its readability,
|
|
fail2ban.conf was converted to use "interpolations" provided by
|
|
ConfigParser class. fw{start,end,{,un}ban} options were moved into
|
|
DEFAULT section and required options (port, protocol) were added
|
|
|
|
-- Yaroslav Halchenko <debian@onerussian.com> Thu, 12 Jan 2006 18:32:14 -0500
|
|
|
|
fail2ban (0.6.0-2) unstable; urgency=low
|
|
|
|
* fail2ban path is inserted first in the list to avoid a conflict with
|
|
existing elsewhere modules with the same names. (Thanks for report and
|
|
patch to Nick Craig-Wood) (closes: #343821)
|
|
|
|
-- Yaroslav Halchenko <debian@onerussian.com> Mon, 19 Dec 2005 17:44:58 +0200
|
|
|
|
fail2ban (0.6.0-1) unstable; urgency=low
|
|
|
|
* Merged with the latest stable upstream release. That incure some
|
|
changes for the Debian configuration of the package to be more
|
|
upstream-like. Visible one is: subject in the sent email includes
|
|
section outside of "[Fail2Ban]"
|
|
* Updated README.Debian to answer possible question regarding effective
|
|
bantime starting moment
|
|
|
|
-- Yaroslav Halchenko <debian@onerussian.com> Sun, 20 Nov 2005 14:56:41 -0500
|
|
|
|
fail2ban (0.5.4-10) unstable; urgency=low
|
|
|
|
* Fixed the order of ssh and apache rules to avoid possible race
|
|
condition (Thanks to Jefferson Cowart for the bug report) (closes:
|
|
#339133)
|
|
|
|
-- Yaroslav Halchenko <debian@onerussian.com> Mon, 14 Nov 2005 23:44:45 -0500
|
|
|
|
fail2ban (0.5.4-9) unstable; urgency=low
|
|
|
|
* Fixed init.d script so it doesn't return non-0 status if fail2ban is not
|
|
running. That fixes issues with purging the package and leaving garbage in
|
|
/usr/share/fail2ban (Thanx to Justin Pryzby for the insight)
|
|
(closes: #337223)
|
|
|
|
-- Yaroslav Halchenko <debian@onerussian.com> Thu, 3 Nov 2005 17:05:20 -0500
|
|
|
|
fail2ban (0.5.4-8) unstable; urgency=low
|
|
|
|
* Added config option MAIL.localtime (closes: #336449)
|
|
|
|
-- Yaroslav Halchenko <debian@onerussian.com> Mon, 31 Oct 2005 16:53:19 -0500
|
|
|
|
fail2ban (0.5.4-7) unstable; urgency=low
|
|
|
|
* Adjusted init.d script so it is resistant to delayed shutdowns of
|
|
fail2ban and in general more stable
|
|
|
|
-- Yaroslav Halchenko <debian@onerussian.com> Thu, 20 Oct 2005 21:22:03 -0400
|
|
|
|
fail2ban (0.5.4-6.2) unstable; urgency=low
|
|
|
|
* Fixed typos (thanx to Ross Boylan).
|
|
* Robust startup: if iptables module gets fully initialized after
|
|
startup of fail2ban, fail2ban will do "maxreinit" attempts to
|
|
initialize its own firewall. It will sleep between attempts for
|
|
"polltime" number of seconds (closes: #334272).
|
|
* To overcome possible conflict with other firewall solutions and as a
|
|
secondary solution for the bug 334272, fail2ban startup is moved
|
|
during bootup to the latest (S99) sequenece position. That should not
|
|
cause any discomfort I believe.
|
|
|
|
-- Yaroslav Halchenko <debian@onerussian.com> Tue, 18 Oct 2005 15:54:38 -0400
|
|
|
|
fail2ban (0.5.4-5.14) unstable; urgency=low
|
|
|
|
* Added a notification regarding the importance of 0.5.4-5 change of
|
|
failregex in the config file.
|
|
* Adjusted address to FSF.
|
|
* Adjusted failregex for SSH so it bans "Illegal user" entries as well, and
|
|
restricted full failregex more to include ":" at the beginning, because
|
|
otherwise it might not be sufficient and would revive bug 330827 (closes:
|
|
#333056).
|
|
* Adjusted failregex for SSH to accommodate recent changes in logging of
|
|
SSH: Illegal -> Invalid. Should match both now.
|
|
* Fixed a problem of raise AttributeError exception reported as a side
|
|
effect of crash during parsing of the config file.
|
|
* Introduced fwcheck option to verify consistency of the
|
|
chains. Implemented automatic restart of fail2ban main function in
|
|
case check of fwban or fwunban command failed (closes: #329163, #331695).
|
|
(Introduced patch was further adjusted by upstream author).
|
|
* Added -f command line parameter for [findtime].
|
|
* Fixed the issue of not respecting command line parameters for parameters
|
|
within sections.
|
|
* Added -e command line parameter to provide enabled sections from command
|
|
line.
|
|
* Added a cleanup of firewall rules on emergency shutdown when unknown
|
|
exception is catched.
|
|
* Fail2ban should not crash now if a wrong file name is specified in
|
|
config.
|
|
|
|
-- Yaroslav Halchenko <debian@onerussian.com> Mon, 3 Oct 2005 22:26:28 -1000
|
|
|
|
fail2ban (0.5.4-5) unstable; urgency=low
|
|
|
|
* Made failregex'es more specific to don't allow usernames to be used as a
|
|
tool for denial of service attacks. Config files (or at least
|
|
failregex'es) must be updated from this package, otherwise the security
|
|
breach would remain open and only warning gets issued (closes: #330827)
|
|
|
|
-- Yaroslav Halchenko <debian@onerussian.com> Sat, 1 Oct 2005 02:42:23 -1000
|
|
|
|
fail2ban (0.5.4-4) unstable; urgency=low
|
|
|
|
* On a request from Calum Mackay added reporting of the enabled sections
|
|
|
|
-- Yaroslav Halchenko <debian@onerussian.com> Thu, 29 Sep 2005 11:20:43 -1000
|
|
|
|
fail2ban (0.5.4-3) unstable; urgency=low
|
|
|
|
* Resolved the mystery of debug mode in which commands are not really
|
|
executed: added verbose option to config file, removed -v from
|
|
/etc/default/fail2ban, reordered code a bit so that log targets are
|
|
setup right after background and then only loglevel (verbose,debug) is
|
|
processed, so the warning could be seen in the logs
|
|
|
|
-- Yaroslav Halchenko <debian@onerussian.com> Thu, 29 Sep 2005 00:20:43 -1000
|
|
|
|
fail2ban (0.5.4-2) unstable; urgency=low
|
|
|
|
* Now exporting PATH explicitely in init.d/fail2ban script, to avoid
|
|
problems finding iptables in the cases when PATH was not exported outside
|
|
(cfengine, broken shell environment) (closes: #329304)
|
|
* Removed -b from start-stop-daemon because fail2ban detahes on its own
|
|
* Added @localhost to MAIL:from and MAIL:to in fail2ban.conf and placed
|
|
a note to README.Debian regarding necessity to specify full email
|
|
address in MAIL:from (closes: #329722)
|
|
* Added a keyword <section> in parsing of the subject and the body of an
|
|
email sent out by fail2ban (closes: #330311)
|
|
|
|
-- Yaroslav Halchenko <debian@onerussian.com> Wed, 27 Sep 2005 08:09:06 -0400
|
|
|
|
fail2ban (0.5.4-1) unstable; urgency=low
|
|
|
|
* New upstream release
|
|
|
|
-- Yaroslav Halchenko <debian@onerussian.com> Tue, 20 Sep 2005 12:19:19 -0400
|
|
|
|
fail2ban (0.5.3-2) unstable; urgency=low
|
|
|
|
* Refined comments in README.Debian
|
|
* Reindented init.d script
|
|
P.S. Was not released
|
|
|
|
-- Yaroslav Halchenko <debian@onerussian.com> Sun, 11 Sep 2005 15:19:44 -0400
|
|
|
|
fail2ban (0.5.3-1) unstable; urgency=low
|
|
|
|
* New upstream release
|
|
|
|
-- Yaroslav Halchenko <debian@onerussian.com> Fri, 9 Sep 2005 16:55:00 -0400
|
|
|
|
fail2ban (0.5.2-5) unstable; urgency=low
|
|
|
|
* Included a patch from Stephen Gildea to provide "status" report by
|
|
init.d script
|
|
* Included a note in README.Debian regarding the fail2ban iptable's
|
|
chains
|
|
|
|
-- Yaroslav Halchenko <debian@onerussian.com> Fri, 9 Sep 2005 14:52:24 -0400
|
|
|
|
fail2ban (0.5.2-4) unstable; urgency=low
|
|
|
|
* Format of SYSLOG entries is up to the standard now
|
|
|
|
-- Yaroslav Halchenko <debian@onerussian.com> Fri, 19 Aug 2005 00:06:44 -1000
|
|
|
|
fail2ban (0.5.2-3) unstable; urgency=low
|
|
|
|
* Fixed errata in /etc/default/fail2ban (closes: #323451)
|
|
* Fixed handling of SYSLOG logging target. Now it can log to any syslog
|
|
target and facility as directed by the config (revisions 160:166 patch
|
|
from syslog branch) (closes: #323543)
|
|
* Included upstream README and TODO
|
|
* Mentioned in README.Debian that apache section is disabled by default
|
|
* Adjusted man pages to cross-reference each other
|
|
* Moved fail2ban man page under section 8 as in upstream
|
|
* Introduced findtime configuration variable to control the lifetime
|
|
of caught "failed" log entries (closes: #323840)
|
|
|
|
-- Yaroslav Halchenko <debian@onerussian.com> Tue, 16 Aug 2005 11:23:28 -1000
|
|
|
|
fail2ban (0.5.2-2) unstable; urgency=low
|
|
|
|
* Updated description to reflect flexibility in application of fail2ban
|
|
* Included logrotate (Thanks to Baruch Even)
|
|
|
|
-- Yaroslav Halchenko <debian@onerussian.com> Sat, 13 Aug 2005 04:51:57 -0400
|
|
|
|
fail2ban (0.5.2-1) unstable; urgency=low
|
|
|
|
* New upstream release
|
|
* No log4py any more
|
|
* removed -i eth0 from config
|
|
|
|
-- Yaroslav Halchenko <debian@onerussian.com> Sat, 6 Aug 2005 09:21:07 -1000
|
|
|
|
fail2ban (0.5.1-1) unstable; urgency=low
|
|
|
|
* New upstream release
|
|
|
|
-- Yaroslav Halchenko <debian@onerussian.com> Sat, 23 Jul 2005 08:50:00 -1000
|
|
|
|
fail2ban (0.5.0-1) unstable; urgency=low
|
|
|
|
* New upstream release
|
|
* Libraries placed under /usr/share/fail2ban instead of /usr/lib/fail2ban
|
|
* Corrections to the description of the package
|
|
|
|
-- Yaroslav Halchenko <debian@onerussian.com> Tue, 12 Jul 2005 23:33:20 -1000
|
|
|
|
fail2ban (0.4.1-1) unstable; urgency=low
|
|
|
|
* First upstream release of a Debian package
|
|
|
|
-- Yaroslav Halchenko <debian@onerussian.com> Mon, 04 Jul 2005 11:47:23 +0300
|