sebres
|
319cfefac2
|
fix travis build (unsupported pythons and pypy versions), update 3.10 in GH actions
|
2021-04-27 13:41:57 +02:00 |
|
sebres
|
d3f5d2d52b
|
documentation (interpolation tags)
|
2021-04-21 11:50:07 +02:00 |
|
sebres
|
f0214b3d36
|
filter.d/sendmail-reject.conf: fixed regex to consider "Connection rate limit exceeded" with different combination of arguments
|
2021-04-20 18:13:40 +02:00 |
|
sebres
|
d135aeea16
|
fixes restore of original logging withing tests (LogCaptureTestCase.tearDown) - python 3 seemed still to log wordy after tear down (setting of log.level does not restore the level for related log objects - e. g. for logger of fail2ban.jail etc, so fail2ban-testcases '(testVersion|testLongName).*servertest' generating messages in stdout handler in testLongName)
|
2021-03-24 14:14:47 +01:00 |
|
sebres
|
8757563be1
|
close fork
|
2021-03-23 14:20:10 +01:00 |
|
sebres
|
e587526ede
|
tests: add missing constraint (causing incomplete comparison in below cycle if fewer lines as expected was found)
|
2021-03-22 00:56:40 +01:00 |
|
sebres
|
04aba6168c
|
fixed typo, -- is not expected in options declaration, so --dump-pretty did never work (only --dp is working)
|
2021-03-03 13:02:00 +01:00 |
|
sebres
|
a45b1c974c
|
filter.d/ignorecommands/apache-fakegooglebot: added timeout parameter (default 55 seconds) - avoid fail with timeout (default 1 minute) by reverse lookup on some slow DNS services (googlebots must be resolved fast);
closes gh-2951
|
2021-03-02 19:35:27 +01:00 |
|
sebres
|
63acc862b1
|
action.d/nginx-block-map.conf: reload nginx only if it is running (also avoid error in nginx-errorlog, gh-2949) and better test coverage for the action
|
2021-02-24 18:21:42 +01:00 |
|
sebres
|
6f4b6ec8cc
|
action.d/badips.* removed (badips.com is no longer active, gh-2889)
|
2021-02-24 13:05:04 +01:00 |
|
sebres
|
e3d43d1241
|
Merge branch 'fix-rc-on-too-many-failures' into 0.10: resolves RC with uncontrolled growth of failure list (jail with too many matches that did not cause ban, gh-2945)
|
2021-02-24 12:45:15 +01:00 |
|
sebres
|
92a2242174
|
amend fixing journal tests (systemd backend only)
|
2021-02-23 15:54:48 +01:00 |
|
sebres
|
e353fb8024
|
fixed test cases (ban ASAP also followed in test suite now, so failure reached maxretry causes immediate ban now)
|
2021-02-23 02:46:44 +01:00 |
|
sebres
|
55d7d9e214
|
*WiP* try to solve RC on jails with too many failures without ban, gh-2945 ...
|
2021-02-22 18:39:58 +01:00 |
|
sebres
|
294ec73f62
|
Merge branch 'py-3-10-alpha-5' into 0.10
|
2021-02-17 18:49:06 +01:00 |
|
Sergey G. Brester
|
9f1d1f4fbd
|
amend for Mapping (jails)
|
2021-02-17 18:47:42 +01:00 |
|
Sergey G. Brester
|
42dee38ad2
|
amend for Mapping
|
2021-02-17 18:47:40 +01:00 |
|
Sergey G. Brester
|
2b6bb2c1be
|
follow bpo-37324: :ref:collections-abstract-base-classes moved to the :mod:collections.abc module
(since 3.10-alpha.5 `MutableMapping` is missing in collections module)
|
2021-02-17 18:47:38 +01:00 |
|
Sergey G. Brester
|
8ae9208454
|
try to provide coverage for 3.10-alpha.5 (#2931)
|
2021-02-17 18:47:32 +01:00 |
|
sebres
|
366c64cb9d
|
extractOptions: ensure options are parsed completely - avoids unexpected skip or truncate of parameters, produces more verbose error message in case of incorrect syntax; added more tests covering several cases
WARN: potential incompatibility (since it doesn't silently ignore wrong syntax anymore)
|
2021-02-03 14:45:30 +01:00 |
|
sebres
|
c75748c5d3
|
fail2ban.conf: added new fail2ban configuration option "allowipv6" (default auto), can be used to allow or disallow IPv6 interface in fail2ban immediately by start (e. g. if fail2ban starts before network interfaces).
closes gh-2804
|
2021-01-27 17:06:14 +01:00 |
|
sebres
|
3700a9e523
|
invalidate IP/DNS caches by reload, so inter alia would allow to recognize IPv6IsAllowed immediately, previously retarded up to cache max-time (5m);
closes gh-2804
|
2021-01-26 20:35:14 +01:00 |
|
sebres
|
913c37db80
|
more fixes and optimizations, better RE's for patterns, allow parse date without time with such a datepattern (assume 00:00:00 then), etc
|
2021-01-21 19:00:56 +01:00 |
|
sebres
|
0f44a3408a
|
amend to 747d468322:
fail2ban-regex: loosen up date patterns %ExY, %Exy - let accept every year from 19xx up to current century (+3 years)
|
2021-01-21 19:00:53 +01:00 |
|
Sergey G. Brester
|
164105fab1
|
added new parameter namespace for systemd backend
closes gh-2910
|
2021-01-16 17:10:12 +01:00 |
|
Sergey G. Brester
|
5f3f4d1e2f
|
action.d/cloudflare.conf: better IPv6 capability
closes gh-2891
|
2021-01-11 15:23:40 +01:00 |
|
sebres
|
9df332fdef
|
filter.d/apache-overflows.conf: extended to match AH00126 error (Invalid URI ...);
closes gh-2908
|
2021-01-11 15:10:53 +01:00 |
|
sebres
|
747d468322
|
fixes century selector of %ExY and %Exy in datepattern for tests, considering interval from 2005 (alternate now) to now; + better grouping algorithm for resulting century RE
|
2021-01-04 02:45:16 +01:00 |
|
sebres
|
73b39e0894
|
filter.d/named-refused.conf: fixes prefix for messages from systemd journal (no mandatory space ahead, because don't have timestamp)
closes gh-2899
|
2020-12-29 21:22:47 +01:00 |
|
sebres
|
27e435a7f5
|
fix cymru test cases
|
2020-12-22 20:36:01 +01:00 |
|
sebres
|
e768f8637a
|
release 0.10.6 -- just what the doctor ordered
|
2020-11-23 19:37:26 +01:00 |
|
sebres
|
79b61e009a
|
ChangeLog
|
2020-11-23 19:18:35 +01:00 |
|
sebres
|
7965d652a1
|
filter.d/dovecot.conf: allow more verbose logging
closes #2573
|
2020-11-23 18:17:29 +01:00 |
|
sebres
|
a6de9459fc
|
typo
|
2020-11-23 18:08:38 +01:00 |
|
RyuaNerin
|
bba8844af8
|
typo
|
2020-11-23 18:07:49 +01:00 |
|
sebres
|
31a4a27ee3
|
better assert message in sample regex factory
|
2020-11-23 18:06:13 +01:00 |
|
Sergey G. Brester
|
fe716743ed
|
Merge pull request #2795 from mateusz834/managesieve-dovecot
add managesieve and submission support in dovecot filter
|
2020-11-23 17:50:16 +01:00 |
|
sebres
|
8672950c15
|
added test cases covering PR #2795
|
2020-11-23 17:47:47 +01:00 |
|
mpoliwczak834
|
595ee7ed74
|
add submission
|
2020-11-23 17:42:12 +01:00 |
|
mpoliwczak834
|
0c12cb7970
|
add managesieve support dovecot filter
|
2020-11-23 17:42:11 +01:00 |
|
sebres
|
cc64ef25f6
|
filter.d/apache-noscript.conf: extended to match "script not found" with error AH02811 (and cgi-bin path segment in script)
closes gh-2805
|
2020-11-23 17:25:41 +01:00 |
|
sebres
|
5d0e74d2ab
|
man/jail.conf.5: documentation extended (prefregex, etc)
closes gh-2820
|
2020-11-23 16:55:55 +01:00 |
|
sebres
|
a107a8e7d2
|
setup.py: cherry-pick from 0.11 (option --without-tests)
|
2020-11-23 14:59:45 +01:00 |
|
Sergey G. Brester
|
9c8dcbd6eb
|
Merge pull request #2855 from benrubson/grafana
Add Grafana jail
|
2020-11-10 15:12:46 +01:00 |
|
Sergey G. Brester
|
1c1a9b868c
|
no catch-alls, user name and error message stored in ticket
|
2020-11-09 15:36:30 +01:00 |
|
benrubson
|
840f0ff10a
|
Add Grafana jail
|
2020-11-09 15:31:06 +01:00 |
|
Sergey G. Brester
|
267cbf5861
|
Merge pull request #2778 from Mart124/bitwarden
Add Bitwarden syslog support
|
2020-11-09 13:47:04 +01:00 |
|
sebres
|
25e006e137
|
review and small tweaks (more precise and safe RE)
|
2020-11-09 13:43:59 +01:00 |
|
Mart124
|
2a18b82f5f
|
Support alternative Bitwarden log format
|
2020-11-09 13:34:41 +01:00 |
|
Mart124
|
df659a0cbc
|
Add Bitwarden syslog support
|
2020-11-09 13:34:39 +01:00 |
|