CERBERUS/fail2ban
1
0
Fork 0
mirror of https://github.com/fail2ban/fail2ban.git synced 2026-10-24 05:11:18 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
3525 commits 35 branches 231 tags 25 MiB
Commit graph

3525 commits

This branch
This branch
All branches
Author SHA1 Message Date
sebres
4cdca8c258 amend-merge for pull request #1429 from sebres/0.10-freebsd-fix-pf 
actiontype for PF action (all- and multi port)
 2016-05-19 14:52:10 +02:00
sebres
4d51c591c1 pf.conf: warranted consistently echoing for the pf actiontype if actiontype or multiport tags will be customized; 2016-05-19 14:50:41 +02:00
Serg G. Brester
01d9a41ba1 Merge pull request #1429 from koeppea/0.10-freebsd-fix-pf 
actiontype for PF action (all- and multi port)
 2016-05-18 11:12:31 +02:00
Alexander Koeppe
b5e031f3c3 some documentation for multiport use in pf.conf 2016-05-17 21:32:21 +02:00
Serg G. Brester
482e1abe9c Merge pull request #1431 from sebres/0.10-muti-option-groups 
jailreader: support multiple option groups (brackets)
 2016-05-17 21:17:12 +02:00
sebres
1e7fd26f5f rename actionoptions to actiontype in pf-action (multiport) + fixed test cases 2016-05-17 20:51:12 +02:00
Yaroslav Halchenko
af1cc41053 Merge pull request #1426 from koeppea/0.10-freebsd-fix-shebang 
no hardcoded python interpreter path
 2016-05-17 13:50:26 -04:00
Alexander Koeppe
e74047ae49 revert to common config for PF covering multi and allports 2016-05-17 18:19:40 +02:00
Alexander Koeppe
3e1328c83b split PF config files between all- and multi port 2016-05-17 18:19:27 +02:00
sebres
c6f63c7263 jailreader: support multiple option groups, syntax action = act[p1=...][p2=...] + test case for it 
(see gh-1425, gh-1429)
 2016-05-17 18:06:46 +02:00
Alexander Koeppe
5e06e8be62 removed shebang and changed mode for fail2banregex.py 2016-05-17 16:42:23 +02:00
Alexander Koeppe
975608dfb6 no hardcoded python interpreter path 2016-05-15 21:08:32 +02:00
sebres
be3e95b76d Merge branch '0.10-fwcmd-fix-test' into 0.10 2016-05-14 15:05:21 +02:00
sebres
0c44ecfc77 action.d/firewallcmd-ipset.conf: different name of the match set's for IPv4/IPv6, using conditional <ipmset>, analog to the iptables-ipset; 
test cases for 3 firewallcmd extended;
 2016-05-14 15:01:35 +02:00
Serg G. Brester
0d0e1853c4 Merge pull request #1424 from TorontoMedia/firewallcmd 
ENH: Branch 0.10 - updated firewallcmd actions
 2016-05-14 13:34:23 +02:00
Serg G. Brester
e0da359a5a Merge pull request #1423 from yarikoptic/0.10 
ENH: version Fail2Ban in this branch as 0.10.0 alpha 1
 2016-05-14 13:26:23 +02:00
Serg G. Brester
d742bc2834 Merge pull request #1422 from sebres/0.10-fix-multi-set 
0.10 fix multi-set and database binding parameters
 2016-05-14 13:25:14 +02:00
TorontoMedia
ffebde68e0 Update firewallcmd-multiport.conf 2016-05-13 22:38:36 -04:00
TorontoMedia
07de83e04a Update firewallcmd-common.conf 2016-05-13 22:38:10 -04:00
TorontoMedia
810d5996b5 Update firewallcmd-rich-logging.conf 2016-05-13 22:10:25 -04:00
TorontoMedia
7e54cee8d6 updated firewallcmd actions 2016-05-13 21:36:27 -04:00
Yaroslav Halchenko
2b6f8737a7 ENH: version Fail2Ban in this branch as 0.10.0 alpha 1 2016-05-13 17:17:46 -04:00
sebres
d420148055 database: always explicit convert ip to str, because may be an IPAddr, that will be unsupported type by bind parameter (as long as we've found any default wrapper handler for sqlite3) 2016-05-13 22:53:57 +02:00
sebres
cb280b817f csocket multi-set fix: prevent to convert list, dict, set during transfer (send), this offers a sending of 'multi-set' arrays 
(missed by cherry-picking from multi-set branch)
 2016-05-13 22:43:02 +02:00
sebres
e0924e0d1b test case fix (always sort result of DNSUtils.textToIp, because order of result from socket.getaddrinfo is undefined (system depended) 2016-05-13 21:44:07 +02:00
sebres
3d3735706b invalid recursion check in substituteRecursiveTags: for example action bsd-ipfw produced ValueError('properties contain self referencing definitions and cannot be resolved...') 
test cases extended for exactly this case and for all stock actions;
closes gh-1417
 2016-05-13 13:53:29 +02:00
Serg G. Brester
1791fd59f2 Merge pull request #1418 from yarikoptic/pr-1415 
DOC: minor PEP8ing and comments enhancements
 2016-05-13 12:49:35 +02:00
Yaroslav Halchenko
a9c563fed2 Merge pull request #1415 from sebres/0.10-fixes 
0.10 fixes
 2016-05-12 18:54:33 -04:00
Yaroslav Halchenko
14c31d8c58 DOC: minor PEP8ing and comments enhancements 2016-05-12 18:52:20 -04:00
sebres
ec6032d934 prevent to fail stock configs test case, if any jail custom config does not have own test log-file (perhaps not clean copy) 2016-05-12 18:15:22 +02:00
sebres
4b5b16cd9f allow using of IPv6 address style mask (analog to the IPv4), for example: 2606:28ff::/ffff:ff80:: -> 2606:2880::/25 
fast calculating of maskplen using map table MAP_ADDR2MASKPLEN, with pre-calculated addr->maskplen values;
test cases extended;
 2016-05-12 18:15:05 +02:00
sebres
0c2eeee8c7 BF: fail2ban-client can't unserialize IPAddr objects - added IPAddr pickle-handler, that simple wrap IPAddr to the str 2016-05-12 12:54:25 +02:00
sebres
9b72522a01 todo fix: not necessary in 0.10 branch 2016-05-11 18:47:55 +02:00
sebres
3df97beaa6 changelog entries from sebres:f2b-perfom-prepare-716 (gh-1346) 2016-05-11 18:03:22 +02:00
sebres
c22ba5413d changes from ipv6-support-0.10 after merge 2016-05-11 16:58:13 +02:00
sebres
f9ea845595 Merge branch 'ipv6-support-0.10' into 0.10 2016-05-11 16:57:16 +02:00
sebres
23ad50dbaa correct <HOST> expression in failregex (now IPv6 will be really found from filter); 
respect standard spelling of IPv6 (with port) enclosed in brackets ([ipv6]:port), to prevent the necessarily changing of many filter definitions, comparison:
#IPv4:
127.0.0.1:55555
#IPv6:
[a🅱️c:d::1]:55555
some small fixes (in test cases also) and code review and few optimizations;
 2016-05-11 16:55:29 +02:00
sebres
f47fdf8918 code coverage: extend conditional test with direct replacement inside replaceTag (besides recursive sub tags) 2016-05-11 16:55:26 +02:00
sebres
e8203dabba python 2.6 compatible test cases 2016-05-11 16:55:24 +02:00
sebres
9da7bb1068 meantime commit: code review, simplification, pythonization, etc. (test cases passed) 2016-05-11 16:55:21 +02:00
Alexander Koeppe
50e5a7e538 More beautifier tests 2016-05-11 16:55:17 +02:00
sebres
d65e37e93d CIDR splitting functionality moved from filter to IPAddr; 
meantime commit: code review, simplification, pythonization, etc. + test cases extended
 2016-05-11 16:54:36 +02:00
Alexander Koeppe
1b21f21c22 CIDR represenation if IPAddr object is a network prefix 2016-05-11 16:54:33 +02:00
sebres
941a2b6c82 clean up unnecessarily resp. directly unused action properties, because they are ambiguous now; 
implemented caching functionality for same substitutions inside replaceTag: very actual and extreme performance growth (up to 1000 times) for ban/unban because too slow substituteRecursiveTags by several tags and many includes, but totally unnecessary as long as parameters are not changing;
 2016-05-11 16:54:31 +02:00
sebres
504e5ba6f2 actions support IPv6 now: 
- introduced "conditional" sections, see for example `[Init?family=inet6]`;
  - iptables-common and other iptables config(s) made IPv6 capable;
  - several small code optimizations;
* all test cases passed (py3.x compatible);
 2016-05-11 16:54:28 +02:00
sebres
75028585c0 test cases extended for verifying ipv4/ipv6, normalized pf-action with test case 2016-05-11 16:54:25 +02:00
Alexander Koeppe
ed2f3ef77d improve PF action and make IPv6 aware 2016-05-11 16:54:22 +02:00
sebres
1a6450643d partially cherry pick from branch 'multi-set', prepare for conditional config parameters logic: 
- new readers logic (group some by multiple parameters 'set' -> 'multi-set';
- prevent to add 'known/' parameters twice (by merge section etc);
- test cases fixed;

# Conflicts:
#	fail2ban/client/actionreader.py
 2016-05-11 16:54:20 +02:00
sebres
43c0f3cdc4 test cases extended 2016-05-11 16:54:17 +02:00
sebres
2497b05abc test cases preliminary extended; 2016-05-11 16:54:14 +02:00