mirror of
https://github.com/fail2ban/fail2ban.git
synced 2026-03-11 08:55:31 +00:00
fec4e7d286
* commit 'upstream-repo/FAIL2BAN-0_8': - Use 80 columns. - Fixed maxretry/findtime rate. Many thanks to Christos Psonis. Tracker #2019714. - Made the named-refused regex a bit less restrictive in order to match logs with "view". Thanks to Stephen Gildea. - Use timetuple instead of utctimetuple for ISO 8601. Maybe not a 100% correct fix but seems to work. Tracker #2500276. - Changed <HOST> template to be more restrictive. Debian bug #514163. - Added cyrus-imap and sieve filters. Thanks to Jan Wagner. Debian bug #513953. - Pull a commit from Yaroslav git repo. BF: addressing added bang to ssh log (closes: #512193). - Added missing semi-colon in the bind9 example. Thanks to Yaroslav Halchenko. - Added NetBSD ipfilter (ipf command) action. Thanks to Ed Ravin. Tracker #2484115. - Improved SASL filter. Thanks to Loic Pefferkorn. Tracker #2310410. - Added CPanel date format. Thanks to David Collins. Tracker #1967610. - Added nagios script. Thanks to Sebastian Mueller. - Removed print. - Removed begin-line anchor for "standard" timestamp. Fixed Debian bug #500824. - Remove socket file on startup is fail2ban crashed. Thanks to Detlef Reichelt. Conflicts: MANIFEST TODO
130 lines
3.4 KiB
Python
130 lines
3.4 KiB
Python
# This file is part of Fail2Ban.
|
|
#
|
|
# Fail2Ban is free software; you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation; either version 2 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# Fail2Ban is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with Fail2Ban; if not, write to the Free Software
|
|
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
|
|
# Author: Cyril Jaquier
|
|
#
|
|
# $Revision: 642 $
|
|
|
|
__author__ = "Cyril Jaquier"
|
|
__version__ = "$Revision: 642 $"
|
|
__date__ = "$Date: 2008-01-05 23:33:44 +0100 (Sat, 05 Jan 2008) $"
|
|
__copyright__ = "Copyright (c) 2004 Cyril Jaquier"
|
|
__license__ = "GPL"
|
|
|
|
import re, sre_constants
|
|
|
|
##
|
|
# Regular expression class.
|
|
#
|
|
# This class represents a regular expression with its compiled version.
|
|
|
|
class Regex:
|
|
|
|
##
|
|
# Constructor.
|
|
#
|
|
# Creates a new object. This method can throw RegexException in order to
|
|
# avoid construction of invalid object.
|
|
# @param value the regular expression
|
|
|
|
def __init__(self, regex):
|
|
self._matchCache = None
|
|
# Perform shortcuts expansions.
|
|
# Replace "<HOST>" with default regular expression for host.
|
|
regex = regex.replace("<HOST>", "(?:::f{4,6}:)?(?P<host>[\w\-.^_]+)")
|
|
if regex.lstrip() == '':
|
|
raise RegexException("Cannot add empty regex")
|
|
try:
|
|
self._regexObj = re.compile(regex)
|
|
self._regex = regex
|
|
except sre_constants.error:
|
|
raise RegexException("Unable to compile regular expression '%s'" %
|
|
regex)
|
|
|
|
##
|
|
# Gets the regular expression.
|
|
#
|
|
# The effective regular expression used is returned.
|
|
# @return the regular expression
|
|
|
|
def getRegex(self):
|
|
return self._regex
|
|
|
|
##
|
|
# Searches the regular expression.
|
|
#
|
|
# Sets an internal cache (match object) in order to avoid searching for
|
|
# the pattern again. This method must be called before calling any other
|
|
# method of this object.
|
|
# @param value the line
|
|
|
|
def search(self, value):
|
|
self._matchCache = self._regexObj.search(value)
|
|
|
|
##
|
|
# Checks if the previous call to search() matched.
|
|
#
|
|
# @return True if a match was found, False otherwise
|
|
|
|
def hasMatched(self):
|
|
if self._matchCache:
|
|
return True
|
|
else:
|
|
return False
|
|
|
|
|
|
##
|
|
# Exception dedicated to the class Regex.
|
|
|
|
class RegexException(Exception):
|
|
pass
|
|
|
|
|
|
##
|
|
# Regular expression class.
|
|
#
|
|
# This class represents a regular expression with its compiled version.
|
|
|
|
class FailRegex(Regex):
|
|
|
|
##
|
|
# Constructor.
|
|
#
|
|
# Creates a new object. This method can throw RegexException in order to
|
|
# avoid construction of invalid object.
|
|
# @param value the regular expression
|
|
|
|
def __init__(self, regex):
|
|
# Initializes the parent.
|
|
Regex.__init__(self, regex)
|
|
# Check for group "host"
|
|
if "host" not in self._regexObj.groupindex:
|
|
raise RegexException("No 'host' group in '%s'" % self._regex)
|
|
|
|
##
|
|
# Returns the matched host.
|
|
#
|
|
# This corresponds to the pattern matched by the named group "host".
|
|
# @return the matched host
|
|
|
|
def getHost(self):
|
|
host = self._matchCache.group("host")
|
|
if host == None:
|
|
# Gets a few information.
|
|
s = self._matchCache.string
|
|
r = self._matchCache.re
|
|
raise RegexException("No 'host' found in '%s' using '%s'" % (s, r))
|
|
return host
|