Commit graph

5693 commits

Author SHA1 Message Date
sebres
3c22ae161c Merge branch '0.11' 2022-06-21 17:17:19 +02:00
sebres
c6cfd761bb Merge remote-tracking branch 'remotes/gh-upstream/0.10' into 0.11 2022-06-21 17:16:03 +02:00
Sergey G. Brester
7ba8f437f1
Merge pull request #3267 from fail2ban/py-3.11-a7
support python 3.11 version
2022-06-21 17:14:26 +02:00
sebres
5d9d86e2f4 GHA: update python 3.11 version (3.11.0-beta.3) 2022-06-21 17:10:48 +02:00
sebres
15f5c36a17 skip test if readline module missing (add it as optional module installs in GHA workflow) 2022-06-21 17:05:39 +02:00
sebres
4337e36616 wrap global flags like ((?i)xxx) or (?:(?i)xxx) to local flags (?i:xxx) if supported by RE-engine in the python version 2022-06-21 16:56:57 +02:00
sebres
7e2ab36d86 move global groups to start of expression (python 3.11 compat) 2022-06-21 16:55:57 +02:00
Sergey G. Brester
500895dcfa GHA: update python 3.11 version 2022-06-21 15:34:58 +02:00
Sergey G. Brester
a2264dcef0
Merge pull request #2636 from brianjmurrell/patch-2
FreeIPA renames named to named-pkcs11
2022-06-21 14:19:16 +02:00
Sergey G. Brester
3e9321e71b
non-capturing group and any variant of suffix 2022-06-21 14:15:38 +02:00
Sergey G. Brester
a7ade07bf4
fixes typo (copy&paste) by logging of flush impossibility at consistency check, #3306 2022-06-19 23:06:42 +02:00
Sergey G. Brester
72a32d5c18
Merge pull request #3304 from koratfood/patch-1
Fix typo in fail2ban-client manpage
2022-06-13 12:23:50 +02:00
koratfood
e3d8b041a2
Fix typo in fail2ban-client manpage
Fix minor typographical error.
2022-06-10 09:52:00 +02:00
sebres
9272cce13d Merge branch '0.11' 2022-06-02 21:06:12 +02:00
sebres
a69d42cea5 Merge branch '0.10' into 0.11 2022-06-02 21:04:43 +02:00
sebres
5aeb49a620 systemd backend: fixes missing space in message (tag <matches>) between timestamp and host if the message read from systemd journal;
closes gh-3293
2022-06-02 21:01:44 +02:00
Sergey G. Brester
fbfc85d8c0
common.conf: fixed typo in comment (rfc5424 for logtype)
no functional changes; closes #3274
2022-05-12 18:09:09 +02:00
sebres
f81f85569d Merge branch '0.11' 2022-03-03 15:18:11 +01:00
sebres
8c4d02403b Merge branch '0.10' into 0.11 2022-03-03 15:15:43 +01:00
sebres
e2d50f38a6 amend to #2279: ensure that <F-MLFGAINED> match would reset all pending multi-line failures 2022-03-03 15:04:34 +01:00
sebres
7eac4ac06f fail2ban-regex: accepts filter parameters with new-line 2022-03-03 14:46:16 +01:00
sebres
3a9f5c0b5d Revert "highlighting got broken, so comment out unless GH/linguist gets fixed"
This reverts commit 1e5d5a446a.
2022-02-22 18:19:44 +01:00
Sergey G. Brester
03bcfa24ca
Merge pull request #3230 from szepeviktor/patch-9
Render Changelog as Markdown
2022-02-22 12:04:05 +01:00
Viktor Szépe
45e08cc07f
Render Changelog as Markdown 2022-02-21 18:29:04 +00:00
Sergey G. Brester
8e62c8a569
syntax 2022-02-21 17:02:24 +01:00
Sergey G. Brester
1e5d5a446a
highlighting got broken, so comment out unless GH/linguist gets fixed
revert #3126
2022-02-21 16:59:38 +01:00
sebres
bc075ea682 Merge branch 'differentiate-ip-fid--gh-3217' 2022-02-18 20:22:28 +01:00
sebres
b903059419 ChangeLog for RFE gh-3217 (with compat warning) 2022-02-18 20:19:43 +01:00
sebres
8eb521694e fulfill getIP with getID replacement; added simple tests for ticket 2022-02-11 21:25:31 +01:00
sebres
cf2695a253 more test cases (coverage for fail2ban-regex on constellations with different IP/ID) 2022-02-11 21:13:30 +01:00
sebres
c6e93db278 filter reader stream: don't need to generate None values from filter config 2022-02-11 21:12:59 +01:00
sebres
b83712e3ec fail2ban-regex: accepts filter parameters with new-line 2022-02-11 21:11:29 +01:00
sebres
96121830da differentiate <ip> and <fid> (<F-ID>): if IP-address deviates from ID then <ip> is not <fid> anymore;
introduces certain backwards incompatibility against actions that have used tag `<ip>` to get failure-ID, if IP-related tags (like `<ADDR>` or `<HOST>`) used additionally to `<F-ID>` and they are different, see gh-3217
2022-02-11 19:10:26 +01:00
Sergey G. Brester
246d0e1100
Merge pull request #3216 from jerrykan/fix_missing_assert
Add missing assert in Fail2banRegexTest.testFrmtOutput
2022-02-11 18:28:37 +01:00
John Kristensen
d17e61ed5b Add missing assert in Fail2banRegexTest.testFrmtOutput
There was no associated `assertLogged()` for the "multiple id combined
to a tuple" test so nothing was actually being tested.
2022-02-11 17:38:58 +11:00
sebres
8b11c89ed4 amend to drop support of python 2.6 2022-02-10 17:04:47 +01:00
sebres
ff7fe572bf drop support for python 2.6 (hardly possible in modern CIs, new features would expect OrderedDicts, etc) 2022-02-10 15:48:51 +01:00
Sergey G. Brester
5bfd9992b4
Update FUNDING.yml 2022-02-09 17:50:35 +01:00
Sergey G. Brester
a98c4218c1
Create FUNDING.yml 2022-02-09 17:34:51 +01:00
sebres
a2431158f6 implements new interpolation variable %(fail2ban_confpath)s (automatically substituted from config-reader path, default /etc/fail2ban or /usr/local/etc/fail2ban depending on distribution); ignorecommands_dir is unneeded anymore, thus removed from paths-common.conf;
fixes gh-3005
2022-02-09 17:10:19 +01:00
sebres
13520a0494 Merge branch '0.11' 2022-02-09 15:45:17 +01:00
sebres
8ac49b5858 Merge branch '0.10' into 0.11 2022-02-09 15:44:35 +01:00
László Károlyi
f380d6202d cherry pick #3210 from master 2022-02-09 15:43:21 +01:00
sebres
cdb6a46945 systemd backend: better avoidance of landing in dead space by seeks over journals;
increase verbosity and stability of few systemd tests (fixes sporadic timing issues);
seekToTime doesn't need to convert float to datetime, because seek_realtime accepts it as unix time (we need to convert integers only, since it means microseconds and deprecated);
2022-02-09 14:47:40 +01:00
sebres
498e473a10 filter.d/courier-auth.conf: consider optional port after IP, regex is rewritten without catch-all's and right anchor, so it is more stable against further modifications now;
closes #3211
2022-02-09 12:18:23 +01:00
sebres
8013cf0b90 python actions have no attribute 'consistencyCheck' by default;
closes gh-3214
2022-02-08 19:57:40 +01:00
sebres
810386a265 filter.d/dovecot.conf: parse everything in parenthesis by auth-worker info, e. g. can match (pid=...,uid=...) too
(amend to 92f90038fa)
2022-02-08 19:21:37 +01:00
sebres
c7ae74ce17 amend to a147a8b0e1: systemd journal test-cases - additional check appropriate default settings (if testing as not root/sudoer) 2022-02-08 19:10:22 +01:00
Sergey G. Brester
6966b7e37d
Merge pull request #3210 from karolyi/patch-1
Adjusting for updated dovecot log format
2022-01-28 21:47:46 +01:00
Sergey G. Brester
dfc866ea41
improve RE to solve conflict with expected another open parenthesis 2022-01-27 17:50:28 +01:00