mirror of
https://github.com/fail2ban/fail2ban.git
synced 2026-03-11 08:55:31 +00:00
fec4e7d286
* commit 'upstream-repo/FAIL2BAN-0_8': - Use 80 columns. - Fixed maxretry/findtime rate. Many thanks to Christos Psonis. Tracker #2019714. - Made the named-refused regex a bit less restrictive in order to match logs with "view". Thanks to Stephen Gildea. - Use timetuple instead of utctimetuple for ISO 8601. Maybe not a 100% correct fix but seems to work. Tracker #2500276. - Changed <HOST> template to be more restrictive. Debian bug #514163. - Added cyrus-imap and sieve filters. Thanks to Jan Wagner. Debian bug #513953. - Pull a commit from Yaroslav git repo. BF: addressing added bang to ssh log (closes: #512193). - Added missing semi-colon in the bind9 example. Thanks to Yaroslav Halchenko. - Added NetBSD ipfilter (ipf command) action. Thanks to Ed Ravin. Tracker #2484115. - Improved SASL filter. Thanks to Loic Pefferkorn. Tracker #2310410. - Added CPanel date format. Thanks to David Collins. Tracker #1967610. - Added nagios script. Thanks to Sebastian Mueller. - Removed print. - Removed begin-line anchor for "standard" timestamp. Fixed Debian bug #500824. - Remove socket file on startup is fail2ban crashed. Thanks to Detlef Reichelt. Conflicts: MANIFEST TODO
145 lines
3.4 KiB
Python
145 lines
3.4 KiB
Python
# This file is part of Fail2Ban.
|
|
#
|
|
# Fail2Ban is free software; you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation; either version 2 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# Fail2Ban is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with Fail2Ban; if not, write to the Free Software
|
|
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
|
|
# Author: Cyril Jaquier
|
|
#
|
|
# $Revision: 638 $
|
|
|
|
__author__ = "Cyril Jaquier"
|
|
__version__ = "$Revision: 638 $"
|
|
__date__ = "$Date: 2007-12-17 21:00:36 +0100 (Mon, 17 Dec 2007) $"
|
|
__copyright__ = "Copyright (c) 2004 Cyril Jaquier"
|
|
__license__ = "GPL"
|
|
|
|
from faildata import FailData
|
|
from ticket import FailTicket
|
|
from threading import Lock
|
|
import logging
|
|
|
|
# Gets the instance of the logger.
|
|
logSys = logging.getLogger("fail2ban.filter")
|
|
|
|
class FailManager:
|
|
|
|
def __init__(self):
|
|
self.__lock = Lock()
|
|
self.__failList = dict()
|
|
self.__maxRetry = 3
|
|
self.__maxTime = 600
|
|
self.__failTotal = 0
|
|
|
|
def setFailTotal(self, value):
|
|
try:
|
|
self.__lock.acquire()
|
|
self.__failTotal = value
|
|
finally:
|
|
self.__lock.release()
|
|
|
|
def getFailTotal(self):
|
|
try:
|
|
self.__lock.acquire()
|
|
return self.__failTotal
|
|
finally:
|
|
self.__lock.release()
|
|
|
|
def setMaxRetry(self, value):
|
|
try:
|
|
self.__lock.acquire()
|
|
self.__maxRetry = value
|
|
finally:
|
|
self.__lock.release()
|
|
|
|
def getMaxRetry(self):
|
|
try:
|
|
self.__lock.acquire()
|
|
return self.__maxRetry
|
|
finally:
|
|
self.__lock.release()
|
|
|
|
def setMaxTime(self, value):
|
|
try:
|
|
self.__lock.acquire()
|
|
self.__maxTime = value
|
|
finally:
|
|
self.__lock.release()
|
|
|
|
def getMaxTime(self):
|
|
try:
|
|
self.__lock.acquire()
|
|
return self.__maxTime
|
|
finally:
|
|
self.__lock.release()
|
|
|
|
def addFailure(self, ticket):
|
|
try:
|
|
self.__lock.acquire()
|
|
ip = ticket.getIP()
|
|
unixTime = ticket.getTime()
|
|
if self.__failList.has_key(ip):
|
|
fData = self.__failList[ip]
|
|
if fData.getLastReset() < unixTime - self.__maxTime:
|
|
fData.setLastReset(unixTime)
|
|
fData.setRetry(0)
|
|
fData.inc()
|
|
fData.setLastTime(unixTime)
|
|
else:
|
|
fData = FailData()
|
|
fData.inc()
|
|
fData.setLastReset(unixTime)
|
|
fData.setLastTime(unixTime)
|
|
self.__failList[ip] = fData
|
|
self.__failTotal += 1
|
|
finally:
|
|
self.__lock.release()
|
|
|
|
def size(self):
|
|
try:
|
|
self.__lock.acquire()
|
|
return len(self.__failList)
|
|
finally:
|
|
self.__lock.release()
|
|
|
|
def cleanup(self, time):
|
|
try:
|
|
self.__lock.acquire()
|
|
tmp = self.__failList.copy()
|
|
for item in tmp:
|
|
if tmp[item].getLastTime() < time - self.__maxTime:
|
|
self.__delFailure(item)
|
|
finally:
|
|
self.__lock.release()
|
|
|
|
def __delFailure(self, ip):
|
|
if self.__failList.has_key(ip):
|
|
del self.__failList[ip]
|
|
|
|
def toBan(self):
|
|
try:
|
|
self.__lock.acquire()
|
|
for ip in self.__failList:
|
|
data = self.__failList[ip]
|
|
if data.getRetry() >= self.__maxRetry:
|
|
self.__delFailure(ip)
|
|
# Create a FailTicket from BanData
|
|
failTicket = FailTicket(ip, data.getLastTime())
|
|
failTicket.setAttempt(data.getRetry())
|
|
return failTicket
|
|
raise FailManagerEmpty
|
|
finally:
|
|
self.__lock.release()
|
|
|
|
class FailManagerEmpty(Exception):
|
|
pass
|