introduces new command "fail2ban-python", as automatically created symlink to python executable, where fail2ban currently installed (resp. its modules are located);
2016-08-12 17:58:37 +02:00
Update apache-badbots.conf
2015-09-05 00:12:28 -04:00
filter.d/apache-modsecurity.conf
2016-11-28 11:28:27 +01:00
Added pass2allow (knocking with fail2ban)
2015-07-10 16:22:43 +02:00
minor typos (thanks Vincent Lefevre, Debian #847785 )
2016-12-11 15:13:11 -05:00
filter.d/asterisk.conf: another part chan_sip.c:28468 handle_request_register: in log prefix
2016-08-22 14:10:50 +02:00
added wp-admin
2016-03-02 16:52:03 +01:00
back to mandatory space, ungrouping of sub parameters in __prefix_line + small code review;
2016-05-19 17:57:48 +02:00
ENH: courier-smtp -- allow for trailing username (no spaces) in the logline
2016-05-21 22:17:09 -04:00
filter.d/cyrus-imap.conf: fixed failregex - accept entries without login-info resp. hostname before IP address
2017-03-09 16:13:45 +01:00
Support for IBM Domino SMTP task ( #1603 )
2017-01-20 08:44:20 +01:00
dovecot: Match also when user field is empty
2017-05-31 15:54:30 +02:00
filter.d/exim.conf: cherry-picked from 0.10, match complex time like D=2m42s (closes gh-1766)
2017-05-07 13:02:32 +02:00
filter.d/exim.conf: added new reason for "rejected RCPT" regex: Unrouteable address
2017-05-07 14:02:38 +02:00
update doc url
2016-04-24 21:35:18 -07:00
add froxlor-auth filter and jail
2015-05-25 13:44:50 +02:00
Update haproxy-http-auth.conf
2016-01-12 08:37:33 +10:00
Update Kerio Connect filter ( #1455 )
2017-05-30 20:27:44 +02:00
code review, makes the test cases workable, added dev-notes
2016-11-28 18:39:07 +01:00
fixed monit filter: failregex find now both previous and new versions:
2016-03-09 20:06:14 +01:00
Updated 'murmur' filter to use new double-anchored regex based on @yarikoptic's suggestions.
2015-12-17 17:45:24 +00:00
Update mysqld-auth.conf
2017-03-24 19:03:17 +01:00
Add HEAD method verb to apache-badbots, nginx-badbots
2015-07-07 17:45:40 +02:00
Shortly, much faster and stable version of regexp (possible because expression is start-anchored and does not contains closely to catch-all sub expressions)
2015-10-29 23:55:23 +01:00
the date brackets removed from filters using __prefix_line, because __prefix_line already contains the date ambit;
2016-05-17 11:55:02 +02:00
filter for openhab domotic software authentication failure with the rest api and web interface + test cases;
2015-10-26 15:48:23 +01:00
Postfix RBL: 554 & SMTP
2017-05-15 14:42:37 +02:00
Accept no space after "failed:" ( #1501 )
2016-08-08 17:09:47 -04:00
Be more backward compatible on matching postfix/smtps/smtpd
2016-04-14 13:54:58 +02:00
define journalmatch setting for pure-ftps
2016-03-11 18:19:53 +01:00
Add optional session id prefix for roundcube 1.1.1
2015-07-04 11:06:51 -04:00
Removed old svn revision comment
2015-11-02 09:08:47 -08:00
test all config-regexp, that contains greedy catch-all before <HOST>, that is hard-anchored at end or precise sub expression after <HOST>;
2017-01-21 15:53:48 +01:00
another variant of regex
2016-07-14 10:19:21 +03:00
sshd: conditional parameter "mode" for sshd jail (normal, ddos, aggressive)
2017-01-21 15:54:49 +01:00
sshd: conditional parameter "mode" for sshd jail (normal, ddos, aggressive)
2017-01-21 15:54:49 +01:00
sshd-amend: optional space after port part
2017-01-23 08:56:47 +01:00
suhosin.conf: removed greedy match
2017-01-21 16:26:07 +01:00
filter.d/vsftpd.conf: optional reason message after FAIL LOGIN, closes #1543
2016-09-09 09:20:15 +02:00
b93e47b12f