Commit graph

6114 commits

Author SHA1 Message Date
Daniel Black
13ec9d58c0 ENH: filter gssftpd is a syslog based service so anchor it using syslog prefix 2013-09-17 07:25:23 +10:00
Yaroslav Halchenko
bb32295b50 DOC: minor - untabified few entries in the ChangeLog 2013-09-16 09:49:24 -04:00
Daniel Black
50a6289f03 BF: handle 2.4 and %f in strftime 2013-09-16 18:50:19 +10:00
Daniel Black
673cc4d77f ENH: anchor at end of recidive filter 2013-09-16 18:43:56 +10:00
Yaroslav Halchenko
38b07ca46e BF: catch and report exceptions while executing commands in client interactive mode (Close #353) 2013-09-15 23:05:32 -04:00
Daniel Black
504111b0b1 ENH: filter.d/recidive - anchor regex at start and support f2b SYSLOG target 2013-09-16 01:22:42 +10:00
Daniel Black
2cefce5ee0 TST: testDateDetectorTemplateOverlap fix for python-2.5 without %f in strftime 2013-09-16 00:09:41 +10:00
Daniel Black
d8f73c0205 ENH: full timezone support
ISO8601 and %z based timezones now fully supported.

Restructured so log lines are also only parsed once and return
a unixtime and a pattern match.

Fix all test cases to adjust for the change in return value.
2013-09-15 23:44:30 +10:00
Daniel Black
422e2527c4 TST: correct failData - faildata in UTC+1 not UTC 2013-09-15 23:42:38 +10:00
Daniel Black
4997b30193 TST: add datetime method on mytime for rework of datedetector 2013-09-15 23:39:41 +10:00
Daniel Black
d875e8ca0d TST: fix test data - TAI64N timedata was in UTC+1 DST rather than UTC+1 2013-09-15 23:38:44 +10:00
Daniel Black
b785076548 TST: fix test data to match parsing of timezone in UTC 2013-09-15 23:37:04 +10:00
Yaroslav Halchenko
f1adf75b59 ENH: basic testing for iso8601 code which had no explicit tests + spit out ValueError for incorrect type of input and ParseError otherwise 2013-09-12 23:12:18 -04:00
Yaroslav Halchenko
abc75b3022 ENH: simplify our formatExceptionInfo
Actually it was not that consistent before and e.g. could add  () if
exception had no parameters and empty tuple.  Simple str'ing seems to
provide the most consistent output and now would bring up our coverage %
2013-09-12 22:47:58 -04:00
Yaroslav Halchenko
660e0597a7 DOC: Adding Manuel Ramierz to THANKS (was on Wiki) and spacing our Nick Munger 2013-09-12 14:21:20 -04:00
Yaroslav Halchenko
851520436f DOC: slight tune up of THANKS file to list Cyril's role there since now THANKS is pointed to from Wiki 2013-09-12 13:24:26 -04:00
Daniel Black
a87b77af59 Merge pull request #350 from beauraines/master
ENH: Added server name to subject line in email notifications
2013-09-10 06:25:23 -07:00
Beau Raines
060bd45295 ENH - Added server name to subject line in email notifications
This is useful when fail2ban is running on multiple servers and
keeping the notifictions separate and knowing which machine is "under
attack".
2013-09-08 15:21:58 -07:00
Daniel Black
8c1b828423 BF: capture of microseconds no longer needed. Closes gh-341 2013-09-09 03:41:12 +10:00
Daniel Black
d0098b0213 ENH: add timezone offest and subsecond support to Datedetector 2013-09-09 03:37:59 +10:00
Daniel Black
1f1a56174f MRG: merge from master 2013-09-08 21:02:35 +10:00
Daniel Black
ad291d7e38 Merge pull request #346 from grooverdan/bsd-ipfw-default-unreach-port
BF: action.d/bsd-ipfw - use blocktype instead of unused action for icmp ...
2013-09-04 16:18:19 -07:00
Daniel Black
e5f1a7f050 Merge pull request #344 from grooverdan/osx
ENH: OSX ipfw based on Andy Fragen's work
2013-09-04 16:16:16 -07:00
Daniel Black
4face1f3e7 MRG: resolve conficts in action.d/osx-ipfw design 2013-09-05 09:07:10 +10:00
Andy Fragen
d258a51a23 after some research it looks like setting to unreachable better than deny 2013-09-04 11:28:03 -07:00
Daniel Black
317e82e144 TST: one more exim test case 2013-09-02 17:10:49 +10:00
Andy Fragen
fe557e5900 more specific actionunban 2013-09-01 13:09:51 -07:00
Andy Fragen
a4884f82cd add mods from grooverdan and fix actionunban
actionunban still not working in grooverdan's mod. I made this one grep both <ip> and <port>. It should be more specific if the same <ip> is banned on multiple ports.
2013-08-31 08:39:19 -07:00
Yaroslav Halchenko
8ae55fe03b ChangeLog entries (+few typo fixes) for the last merges 2013-08-31 10:04:03 -04:00
Yaroslav Halchenko
f1487bfb74 Merge pull request #240 from jpmx/master
bug fixed on redhat-initd

per @opoplawski  blessing
2013-08-31 06:57:42 -07:00
Yaroslav Halchenko
1135ff5297 Merge pull request #319 from opoplawski/jail.d
Install empty /etc/fail2ban/jail.d and fail2ban.d directories
2013-08-31 06:55:33 -07:00
Yaroslav Halchenko
cd100ce274 Merge pull request #342 from grooverdan/datedetector_test
TST: improve datedetector error reporting
2013-08-31 06:53:59 -07:00
Daniel Black
6b0e2289d4 Merge pull request #335 from grooverdan/gh-333-bind
ENH: filter.d/named-refused.conf - BIND 9.9.3 regex changes. Closes gh-333
2013-08-30 21:34:22 -07:00
Daniel Black
f2bcf84893 BF: action.d/bsd-ipfw - use blocktype instead of unused action for icmp rejecting blocked packets 2013-08-31 11:40:04 +10:00
Daniel Black
749f215089 ENH: port optional 2013-08-31 11:07:15 +10:00
Daniel Black
8b22fa15b5 BF: reverted to simplier random rulenum. If your machine is handling 1000s of block the addition complexity isnt what you want 2013-08-31 11:03:01 +10:00
Daniel Black
b31799a322 ENH: add action.d/osx-afctl anonymously contributed on f2b wiki 2013-08-31 10:51:04 +10:00
Daniel Black
808aa1a792 ENH: added jail.conf example. closes gh-340 2013-08-31 09:39:21 +10:00
Daniel Black
5741348f45 ENH: more options and ruggedness to prevent unintensional consequences 2013-08-31 09:38:18 +10:00
Daniel Black
908d4adf6f DOC: credits and thanks for Andy for osx-ipfw 2013-08-31 09:37:15 +10:00
Daniel Black
52bd0f86a8 Merge branch 'osx-ipfw' of https://github.com/afragen/fail2ban into osx 2013-08-31 09:09:04 +10:00
Daniel Black
7cc3e8a8c0 BF: Invert expression on actionstop in bsd-ipfw.conf to ensure exit status 0 on success. Closes gh-343 2013-08-31 08:59:02 +10:00
Daniel Black
2acaef9d89 TST: more detail in assertion 2013-08-29 09:17:13 +10:00
Orion Poplawski
71317332ec Install empty /etc/fail2ban/fail2ban.d directory 2013-08-28 11:33:05 -06:00
Daniel Black
f2a60daea1 TST/BF: assertIsNotNone replaced with assertNotEqual for python 2.4 compatibility 2013-08-28 12:55:21 +10:00
Daniel Black
13b4f176ab TST: improve datedetector error reporting 2013-08-28 12:41:20 +10:00
Daniel Black
15f2f38972 ENH: anchor regex at start 2013-08-28 12:32:40 +10:00
Daniel Black
d5684a0834 BF: filter.d/routecube-auth - time offset can be positive or negative 2013-08-28 11:57:38 +10:00
Daniel Black
cbed57bffd TST: fix year in named-bind test case 2013-08-28 08:52:56 +10:00
Daniel Black
a401d11644 ENH: add regex for bad zone transfer request/ TST: add test for bind-9.9 zone transfer denied 2013-08-28 00:53:08 +10:00