Sergey G. Brester
|
753fff9c15
|
amend to #2750, add jail for new filter nginx-bad-request
|
2020-11-23 18:38:41 +01:00 |
|
Sergey G. Brester
|
071048b8f2
|
Merge pull request #2750 from janprzy/master
Added filter nginx-bad-request
|
2020-11-23 18:28:07 +01:00 |
|
sebres
|
7965d652a1
|
filter.d/dovecot.conf: allow more verbose logging
closes #2573
|
2020-11-23 18:17:29 +01:00 |
|
sebres
|
a6de9459fc
|
typo
|
2020-11-23 18:08:38 +01:00 |
|
RyuaNerin
|
bba8844af8
|
typo
|
2020-11-23 18:07:49 +01:00 |
|
sebres
|
31a4a27ee3
|
better assert message in sample regex factory
|
2020-11-23 18:06:13 +01:00 |
|
Sergey G. Brester
|
fe716743ed
|
Merge pull request #2795 from mateusz834/managesieve-dovecot
add managesieve and submission support in dovecot filter
|
2020-11-23 17:50:16 +01:00 |
|
sebres
|
8672950c15
|
added test cases covering PR #2795
|
2020-11-23 17:47:47 +01:00 |
|
mpoliwczak834
|
595ee7ed74
|
add submission
|
2020-11-23 17:42:12 +01:00 |
|
mpoliwczak834
|
0c12cb7970
|
add managesieve support dovecot filter
|
2020-11-23 17:42:11 +01:00 |
|
sebres
|
cc64ef25f6
|
filter.d/apache-noscript.conf: extended to match "script not found" with error AH02811 (and cgi-bin path segment in script)
closes gh-2805
|
2020-11-23 17:25:41 +01:00 |
|
sebres
|
5d0e74d2ab
|
man/jail.conf.5: documentation extended (prefregex, etc)
closes gh-2820
|
2020-11-23 16:55:55 +01:00 |
|
sebres
|
d04c6c13ed
|
merge point
|
2020-11-23 15:02:05 +01:00 |
|
sebres
|
a107a8e7d2
|
setup.py: cherry-pick from 0.11 (option --without-tests)
|
2020-11-23 14:59:45 +01:00 |
|
sebres
|
1cefb7fdc6
|
setup.py: small amend to d2d3762ba9: allow build without tests also (both build and install accepting --without-tests option now)
|
2020-11-23 14:45:24 +01:00 |
|
sebres
|
f5ea40c7da
|
Merge branch '0.11' into master
|
2020-11-11 11:19:05 +01:00 |
|
sebres
|
adbfdc222d
|
Merge branch '0.10' into 0.11
|
2020-11-11 11:17:15 +01:00 |
|
sebres
|
ca4da9d1d3
|
actions: extend tags replacement in non ticket-based commands (actionstart, actionstop, etc);
fixes regression by interpolation of tag `<bantime>` introduced in 0.11 with dynamic bantime (due to `bantime.increment`, see #2869)
|
2020-11-11 11:08:23 +01:00 |
|
Sergey G. Brester
|
9c8dcbd6eb
|
Merge pull request #2855 from benrubson/grafana
Add Grafana jail
|
2020-11-10 15:12:46 +01:00 |
|
Sergey G. Brester
|
1c1a9b868c
|
no catch-alls, user name and error message stored in ticket
|
2020-11-09 15:36:30 +01:00 |
|
benrubson
|
840f0ff10a
|
Add Grafana jail
|
2020-11-09 15:31:06 +01:00 |
|
Sergey G. Brester
|
267cbf5861
|
Merge pull request #2778 from Mart124/bitwarden
Add Bitwarden syslog support
|
2020-11-09 13:47:04 +01:00 |
|
sebres
|
25e006e137
|
review and small tweaks (more precise and safe RE)
|
2020-11-09 13:43:59 +01:00 |
|
Mart124
|
2a18b82f5f
|
Support alternative Bitwarden log format
|
2020-11-09 13:34:41 +01:00 |
|
Mart124
|
df659a0cbc
|
Add Bitwarden syslog support
|
2020-11-09 13:34:39 +01:00 |
|
Sergey G. Brester
|
472bdc437b
|
Merge pull request #2723 from benrubson/softether
Add SoftEtherVPN jail
|
2020-11-09 13:23:25 +01:00 |
|
Sergey G. Brester
|
010e76406f
|
small tweaks (both 2nd time and facility are optional, avoid catch-all, etc)
|
2020-11-09 13:19:25 +01:00 |
|
sebres
|
9f635c66fb
|
Merge branch '0.11' into master
|
2020-11-09 12:45:54 +01:00 |
|
sebres
|
66ff90408f
|
Merge branch '0.10' into 0.11
|
2020-11-09 12:45:29 +01:00 |
|
sebres
|
d4adec7797
|
Merge branch '0.9' into 0.10
|
2020-11-09 12:44:07 +01:00 |
|
sebres
|
5430091acb
|
jail counter-strike: removed link to site with redirect to malicious page (gh-2868)
|
2020-11-09 12:43:34 +01:00 |
|
benrubson
|
ec873e2dc3
|
Add SoftEtherVPN jail
|
2020-11-05 23:56:30 +01:00 |
|
sebres
|
e700ccc667
|
filter apache-modsecurity: added coverage for different log-format (apache 2.4 and php-fpm, gh-2717)
|
2020-11-05 16:51:49 +01:00 |
|
sebres
|
690ad20958
|
Merge branch '0.11' into master
|
2020-11-05 16:16:17 +01:00 |
|
sebres
|
6ef69b48ca
|
Merge branch '0.10' into 0.11
|
2020-11-05 16:12:31 +01:00 |
|
sebres
|
55d6408b13
|
tweaks to speedup test-cases (test-suite seems to be time stable now, so we could shorten sleeping intervals)
|
2020-11-05 15:31:11 +01:00 |
|
sebres
|
7f0010be68
|
attempt to install systemd-python module
|
2020-11-05 14:12:39 +01:00 |
|
Sergey G. Brester
|
7cb6412f68
|
1st try of GH actions flow (CI only, no coverage atm)
|
2020-11-05 14:12:37 +01:00 |
|
Sergey G. Brester
|
9d77fb2b4c
|
1st try of GH actions flow (CI only, no coverage atm)
|
2020-11-03 15:38:06 +01:00 |
|
Sergey G. Brester
|
a07e6fe1a2
|
reduce default maxmatches from 50 to 5: avoid too large memory consumption if maxretry is large and many failures don't cause ban (but accumulated in fail-manager with all the matched lines);
closes gh-2843
|
2020-10-30 14:17:47 +01:00 |
|
sebres
|
02525d7b6f
|
filter.d/sshd.conf: mode ddos (and aggressive) extended with new rule closing flood attack vector, matching:
error: kex_exchange_identification: Connection closed by remote host
(gh-2850)
|
2020-10-08 21:07:51 +02:00 |
|
sebres
|
c8059bf9b3
|
ban/unban: increase responsiveness of actions thread by (un)banning process, better waiting timeout considering pending tickets for unban (_nextUnbanTime)
|
2020-09-29 16:27:17 +02:00 |
|
sebres
|
2817a8144c
|
action.d/bsd-ipfw.conf: small amend (gh-2836) simplifying awk condition/code (position starts from <lowest_rule_num> and increases whilst used)
|
2020-09-29 13:33:40 +02:00 |
|
sebres
|
1418bcdf5b
|
action.d/bsd-ipfw.conf: fixed selection of rule-no by large list or initial lowest_rule_num, exit code can't be larger than 255 (gh-2836)
|
2020-09-29 12:35:49 +02:00 |
|
sebres
|
960e30cfcd
|
Merge branch '0.11'
|
2020-09-23 19:41:04 +02:00 |
|
sebres
|
d253e60a8b
|
Merge branch '0.10' into 0.11
|
2020-09-23 19:39:50 +02:00 |
|
sebres
|
24093de32d
|
small amend (simplifying formatted help and man)
|
2020-09-23 19:35:17 +02:00 |
|
Nathan Henrie
|
f518d42c59
|
Add a note about journalflags options to systemd-journal backend
Also adds systemd backend configuration examples to jail.conf(5)
Closes #2696
|
2020-09-23 19:09:42 +02:00 |
|
sebres
|
4c2539856c
|
Merge branch 'speedup-client-status' into 0.10
|
2020-09-23 13:03:45 +02:00 |
|
Sergey G. Brester
|
d977d81ef7
|
action.d/abuseipdb.conf: removed broken link, simplified usage example, fixed typos
|
2020-09-17 12:39:08 +02:00 |
|