prehistoric-systems/fail2ban
1
0
Fork 0
mirror of https://github.com/fail2ban/fail2ban.git synced 2026-03-11 08:55:31 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
5342 commits 34 branches 230 tags 22 MiB
Commit graph

1066 commits

Author SHA1 Message Date
sebres
960e30cfcd Merge branch '0.11' 2020-09-23 19:41:04 +02:00
sebres
74b73bce8a Merge branch '0.10' into 0.11 2020-09-04 13:09:47 +02:00
sebres
a038fd5dfe action.d/firewallcmd-*.conf (multiport only): fixed port range selector, replacing : with -; 
small optimizations on `firewallcmd-rich-rules.conf` and `firewallcmd-rich-logging.conf` simplifying both and provide a dependency (rich-logging is a derivative of rich-rules);
closes gh-2821
 2020-09-03 16:41:23 +02:00
sebres
4d2734dd86 Merge branch '0.10' into 0.11 2020-09-02 20:23:07 +02:00
sebres
f09ba1b399 action in jail-config extended to consider space as separator now (splitWithOptions separates by space between mains words, but not in options), so defining action = a b would specify 2 actions a and b; 
it is additionally more precise now (see fixed typo with closed bracket `]` instead of comma in testServerReloadTest)
 2020-09-02 20:09:06 +02:00
sebres
a3a148078e fail2ban-regex: more informative output for datepattern (e. g. set from filter) - pattern : description, example: 
Use      datepattern : ^%Y-%m-%d %H:%M:%S : ^Year-Month-Day 24hour:Minute:Second
 2020-08-28 14:12:57 +02:00
sebres
17a6ba44b3 fail2ban-regex: speedup formatted output (bypass unneeded stats creation); 
fail2ban-regex: extended with prefregex statistic
 2020-08-28 13:52:09 +02:00
sebres
8bc7623388 Merge branch '0.11' 2020-08-26 13:49:41 +02:00
sebres
e9071b642a Merge branch '0.10' into 0.11 2020-08-25 18:28:18 +02:00
sebres
2945fe8cbd changelog 2020-08-25 18:25:32 +02:00
sebres
7327fee2c8 Merge branch '0.11' 2020-08-24 16:33:30 +02:00
sebres
4bc8bc9d5f Merge branch '0.10' into 0.11 2020-08-24 16:31:48 +02:00
sebres
295630cccf documentation and changelog 2020-08-24 16:12:55 +02:00
sebres
7d172faa50 implements gh-2791: fail2ban-client extended to unban IP range(s) by subnet (CIDR/mask) or hostname (DNS) 2020-08-11 16:01:52 +02:00
sebres
1ea36c3045 Merge branch '0.11' 2020-08-04 17:19:51 +02:00
sebres
9d076af9a2 Merge branch '0.11-combine-multiple-captures' into 0.11 2020-08-04 17:15:28 +02:00
sebres
98983adf76 update ChangeLog 2020-08-04 17:14:13 +02:00
sebres
067b76fc9e Merge branch '0.10' into 0.11 2020-08-04 15:40:59 +02:00
sebres
62a6771b33 Merge remote-tracking branch 'sebres:0.10' into 0.10; closes gh-2763 
action.d/nftables.conf (type=multiport only): fixed port range selector (replacing `:` with `-`)
 2020-08-04 13:51:20 +02:00
sebres
78fc99ec7e Merge branch '0.11' 2020-06-11 12:52:34 +02:00
sebres
1da9ab78be Merge branch '0.10' into 0.11 2020-06-11 12:52:13 +02:00
sebres
5a0edf61c9 filter.d/sshd.conf: normalizing of user pattern in all RE's, allowing empty user (gh-2749) 2020-06-08 14:38:26 +02:00
sebres
6cff2bb007 Merge branch '0.11' 2020-05-25 19:09:29 +02:00
sebres
1588200274 Merge branch '0.10' into 0.11 2020-05-25 18:58:05 +02:00
Sergey G. Brester
368aa9e775
Merge pull request #2689 from benrubson/gitlab 
New Gitlab jail
 2020-05-04 19:19:13 +02:00
Sergey G. Brester
42aef09d69
Update ChangeLog 2020-04-27 19:38:48 +02:00
Sergey G. Brester
da1652d0d7
Update ChangeLog 2020-04-26 12:26:55 +02:00
sebres
6b90ca820f filter.d/traefik-auth.conf: filter extended with parameter mode (normal, ddos, aggressive) to handle the match of username differently: 
- `normal`: matches 401 with supplied username only
  - `ddos`: matches 401 without supplied username only
  - `aggressive`: matches 401 and any variant (with and without username)
closes gh-2693
 2020-04-23 13:08:24 +02:00
sebres
affd9cef5f filter.d/courier-smtp.conf: prefregex extended to consider port in log-message (closes gh-2697) 2020-04-21 13:32:17 +02:00
sebres
06b46e92eb jail.conf: don't specify action directly in jails (use action_ or banaction instead); 
no mails-action added per default anymore (e. g. to allow that `action = %(action_mw)s` should be specified per jail or in default section in jail.local), closes gh-2357;
ensure we've unique action name per jail (also if parameter `actname` is not set but name deviates from standard name, gh-2686);
don't use %(banaction)s interpolation because it can be complex value (containing `[...]`), so would bother the action interpolation.
 2020-04-15 19:00:49 +02:00
Sergey G. Brester
78651de7e5
Update ChangeLog 2020-04-14 12:25:18 +02:00
sebres
9905904bba Merge branch '0.11' 2020-03-13 22:43:22 +01:00
sebres
00c5d33e45 Merge branch '0.10' into 0.11 2020-03-13 22:39:19 +01:00
sebres
bc2b81133c pyinotify backend: guarantees initial scanning of log-file by start (retarded via pending event if filter not yet active) 2020-03-13 22:07:32 +01:00
sebres
4c22d4a801 Merge branch '0.11' 2020-03-13 17:47:03 +01:00
sebres
d42ec210cc Merge branch '0.10' into 0.11 2020-03-13 17:44:29 +01:00
sebres
9f1c6f1617 filter stability fix: prevent race condition - no ban if filter (backend) is continuously busy if too many messages will be found in log, e. g. initial scan of large log-file or journal (gh-2660) 2020-03-13 17:34:37 +01:00
sebres
e3737bb7c0 filter stability fix: prevent race condition - no ban if filter (backend) is continuously busy if too many messages will be found in log, e. g. initial scan of large log-file or journal (gh-2660) 2020-03-13 17:20:19 +01:00
Sergey G. Brester
d4da9afd7f
Update ChangeLog 2020-03-06 20:29:48 +01:00
sebres
8b43d54878 Merge branch '0.11' 2020-03-05 14:32:42 +01:00
sebres
32f02ef3b3 Merge branch '0.10' into 0.11 2020-03-05 14:01:14 +01:00
sebres
42714d0849 filter.d/common.conf: closes gh-2650, avoid substitute of default values in related lt_* section, __prefix_line should be interpolated in definition section (after the config considers all sections that can overwrite it); 
amend to 62b1712d22 (PR #2387, backend-related option `logtype`);
testSampleRegexsZZZ-GENERIC-EXAMPLE covering now negative case also (other daemon in prefix line)
 2020-03-05 13:47:11 +01:00
sebres
2ddf687c31 Merge branch '0.10' into 0.11 - test cases only (add ban to database was moved to observer in 0.11) 2020-03-02 19:17:16 +01:00
sebres
15158e4474 closes gh-2647: add ban to database is moved from jail.putFailTicket to actions.__CheckBan; be sure manual ban is written to database, so can be restored by restart; reload/restart test extended 2020-03-02 18:58:59 +01:00
sebres
f088e7bf76 Merge branch '0.10' into 0.11 2020-03-02 17:10:48 +01:00
sebres
4766547e1f performance optimization of datepattern (better search algorithm); 
datetemplate: improved anchor detection for capturing groups `(^...)`; introduced new prefix `{UNB}` for `datepattern` to disable word boundaries in regex;
datedetector: speedup special case if only one template is defined (every match wins - no collision, no sorting, no other best match possible)
 2020-02-28 14:27:21 +01:00
sebres
ef1eaf9b37 Merge branch '0.11' 2020-02-25 17:18:50 +01:00
sebres
c15c300d2a Merge branch '0.10' into 0.11 2020-02-25 17:11:29 +01:00
sebres
e6ca04ca9d Merge branch '0.10' into 0.11 + version bump (back to dev) 2020-02-25 16:10:31 +01:00
Christopher Gurnee
df885586d4 close Popen() pipes explicitly for PyPy 
Waiting for garbage collection to close pipes opened by Popen() can
lead to "Too many open files" errors with PyPy; close them explicitly.
 2020-02-25 14:55:10 +01:00