Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
| * | | | Change tool from 'cut' to 'sed' | Ilya | 2020-04-27 | 1 | -1/+1 | |
| | | | | | | | | | | | | Sed regex was tested - it works. | |||||
| * | | | Fix actionunban | Ilya | 2020-04-27 | 1 | -1/+1 | |
| |/ / | | | | | | | Add command to remove new line character. Needed for working removing rule from cloudflare firewall. | |||||
| * | | action.d/*-ipset*.conf: several ipset actions fixed (no timeout per default ↵ | sebres | 2020-04-25 | 4 | -31/+61 | |
| | | | | | | | | | | | | anymore), so no discrepancy between ipset and fail2ban (removal from ipset will be managed by fail2ban only) | |||||
* | | | Merge branch '0.10' into 0.11 | sebres | 2020-01-14 | 1 | -2/+4 | |
|\ \ \ | |/ / | | / | |/ |/| | ||||||
| * | action.d/nginx-block-map.conf: fixed backslash substitution (different echo ↵ | sebres | 2020-01-14 | 1 | -2/+4 | |
| | | | | | | | | behavior in some shells, gh-2596) | |||||
* | | Merge branch '0.10' into 0.11 | sebres | 2019-10-18 | 1 | -13/+32 | |
|\ \ | |/ | ||||||
| * | nftables: amend to gh-2254 - implemented shutdown of action (proper ↵ | sebres | 2019-10-18 | 1 | -0/+9 | |
| | | | | | | | | | | | | | | clean-up) - at stop it checks now the last set was deleted and removes table completely (if table does not contain any set); this is avoided if some sets were added manually or can be avoided via overwriting of parameter `_nft_shutdown_table`, for example: banaction = nftables[_nft_shutdown_table=''][...] | |||||
| * | nftables: add options allowing to specify own table (default `f2b-table`) ↵ | sebres | 2019-10-18 | 1 | -11/+21 | |
| | | | | | | | | and chain (default `f2b-chain`) | |||||
| * | regrouping expressions with curly braces, added more escapes (better ↵ | sebres | 2019-10-18 | 1 | -5/+5 | |
| | | | | | | | | handling in posix shell) | |||||
* | | Merge branch '0.10' into 0.11 | sebres | 2019-10-18 | 4 | -151/+190 | |
|\ \ | |/ | ||||||
| * | fixed mistake in config (semicolon after space as comment in configs?) and ↵ | sebres | 2019-09-25 | 1 | -3/+3 | |
| | | | | | | | | coverage, suppress errors by unsupported flush, better space handling in helper _nft_get_handle_id, etc | |||||
| * | action.d/nftables.conf: implemented `actionflush` (allows flushing nftables ↵ | sebres | 2019-09-24 | 1 | -9/+22 | |
| | | | | | | | | sets resp. fast unban of all jail tickets at all) | |||||
| * | allow to use multiple protocols in multiport (single set with multiple rules ↵ | sebres | 2019-09-24 | 1 | -4/+15 | |
| | | | | | | | | | | | | | | in chain): `banaction = nftables[type=multiport]` with `protocol="tcp,udp,sctp"` in jail replace 3 separate actions. more robust if deleting multiple references to set (rules in chain) | |||||
| * | combine nftables actions to single action: | sebres | 2019-09-24 | 3 | -22/+22 | |
| | | | | | | | | | | | | - nftables-common is removed - nftables-allports is obsolete, replaced by nftables[type=allports] - nftables-multiport is obsolete, replaced by nftables[type=multiport] | |||||
| * | nftables-allports: support multiple protocols in single rule; | sebres | 2019-09-24 | 1 | -1/+1 | |
| | | | | | | | | tests/servertestcase.py: added coverage for nftables actions | |||||
| * | fix actionban/unban ip definition syntax | Ririsoft | 2019-09-24 | 1 | -2/+2 | |
| | | ||||||
| * | Rewrite nftables variables based on nftables' logic. | Monson Shao | 2019-09-24 | 3 | -48/+63 | |
| | | | | | | | | Add an example for redirecting. | |||||
* | | Merge branch '0.10' into 0.11 | sebres | 2019-07-22 | 1 | -9/+3 | |
|\ \ | |/ | ||||||
| * | Badips key is only used to retrieve list | benrubson | 2019-06-26 | 1 | -9/+3 | |
| | | ||||||
* | | Merge branch '0.10' into 0.11 | sebres | 2019-06-26 | 10 | -22/+31 | |
|\ \ | |/ | ||||||
| * | normalize, simplify and fix several mail actions (mail and sendmail actions ↵ | sebres | 2019-06-15 | 10 | -22/+31 | |
| | | | | | | | | | | | | are more similar now, sendmail is configurable via parameter `mailcmd`, etc); added test covering sendmail-whois-lines | |||||
* | | Merge branch '0.10' into 0.11 | sebres | 2019-06-12 | 1 | -15/+5 | |
|\ \ | |/ | ||||||
| * | action.d/badips.py: fix start of banaction on demand (which may be IP-family ↵ | sebres | 2019-06-12 | 1 | -15/+5 | |
| | | | | | | | | | | | | related), supplied action info with ticket instead of simulating it with dict; (closes gh-2390) | |||||
* | | Merge branch '0.10' into 0.11 | sebres | 2019-06-07 | 1 | -4/+1 | |
|\ \ | |/ | ||||||
| * | cut comment to limit documented on abuseipdb, additionally use curl in quiet ↵ | Sergey G. Brester | 2019-06-07 | 1 | -1/+1 | |
| | | | | | | | | mode | |||||
| * | Switch to AbuseIPDB API v2 | Carlos Ferreira | 2019-06-07 | 1 | -4/+1 | |
| | | ||||||
* | | Merge branch '0.10' into 0.11 | sebres | 2019-05-10 | 1 | -2/+3 | |
|\ \ | |/ | ||||||
| * | action.d/helpers-common.conf: grep arguments are rewritten - using options ↵ | sebres | 2019-05-10 | 1 | -2/+3 | |
| | | | | | | | | `-wF` to match only whole words and fixed string (not as pattern) | |||||
| * | Fix grep pattern to deal with Apache's error log | chtheis | 2019-05-10 | 1 | -1/+1 | |
| | | | | | | Apache's error log appends the port to the IP address, other logs don't. | |||||
* | | Merge branch '0.10' into 0.11 | sebres | 2019-05-02 | 2 | -1/+4 | |
|\ \ | |/ | ||||||
| * | action.d/nginx-block-map.conf: small fix with better RE-rule for removal of ↵ | sebres | 2019-05-02 | 1 | -1/+1 | |
| | | | | | | | | ID (token/session) via sed (anchored now) | |||||
| * | closes gh-2408: prevent execution of action `abuseipdb` for restored tickets | Sergey G. Brester | 2019-04-29 | 1 | -0/+3 | |
| | | ||||||
* | | Merge branch '0.10' into 0.11 | sebres | 2019-03-27 | 1 | -6/+22 | |
|\ \ | |/ | ||||||
| * | action.d/xarf-login-attack.conf: fixes gh-2372, correction for split of ↵ | sebres | 2019-03-16 | 1 | -6/+22 | |
| | | | | | | | | | | | | addresses, interpolation is shell-independent now, etc; extended with option `boundary`, additionally dynamic boundary part is used (is not so predictable as it was previously); | |||||
* | | Merge branch '0.10' into 0.11 | sebres | 2019-03-01 | 1 | -7/+16 | |
|\ \ | |/ | ||||||
| * | loglevel and shortloglevel combined to single parameter loglevel, below an ↵ | sebres | 2019-02-22 | 1 | -8/+9 | |
| | | | | | | | | | | | | example logging summary with NOTICE and rest with DEBUG log-levels: action = badips.py[... , loglevel="debug, notice"] | |||||
| * | Add a shortloglevel badips.py option | benrubson | 2019-02-22 | 1 | -5/+13 | |
| | | ||||||
* | | Merge branch '0.10' into 0.11 | sebres | 2019-02-22 | 1 | -6/+6 | |
|\ \ | |/ | ||||||
| * | coverage: try to avoid sporadic "coverage decreased" in CI | sebres | 2019-02-22 | 1 | -6/+6 | |
| | | ||||||
* | | fix: correct spelling category | todgru | 2019-01-14 | 1 | -1/+1 | |
| | | ||||||
* | | Merge branch '0.10' into 0.11 | sebres | 2018-11-21 | 1 | -1/+1 | |
|\ \ | |/ | ||||||
| * | Merge remote-tracking branch 'remotes/gh-upstream/master' into 0.10 | sebres | 2018-11-21 | 1 | -1/+1 | |
| |\ | ||||||
| | * | "be" instead of "me" in shorewall.conf | dienteperro | 2018-11-15 | 1 | -1/+1 | |
| | | | ||||||
* | | | Merge branch '0.10' into 0.11 (version bump after r.0.10.4) | sebres | 2018-10-04 | 1 | -10/+19 | |
|\ \ \ | |/ / | ||||||
| * | | Merge pull request #2205 from benrubson/patch-1 | Sergey G. Brester | 2018-10-02 | 1 | -10/+19 | |
| |\ \ | | | | | | | | | Add loglevel option to badips.py | |||||
| | * | | fixed py3 incompatibility (for some reasons this file seems to be excluded ↵ | Sergey G. Brester | 2018-10-02 | 1 | -2/+2 | |
| | | | | | | | | | | | | | | | | from 2to3), anyway not needed, because int-type is already checked in str2LogLevel | |||||
| | * | | badips.py: Rewrite new bool option "log" as "loglevel" and revert default to ↵ | Sergey G. Brester | 2018-10-02 | 1 | -13/+13 | |
| | | | | | | | | | | | | | | | | log-level (DEBUG). | |||||
| | * | | Also log number of IPs removed/added | Ben RUBSON | 2018-09-08 | 1 | -6/+9 | |
| | | | | ||||||
| | * | | Typo | Ben RUBSON | 2018-08-19 | 1 | -1/+1 | |
| | | | | ||||||
| | * | | Add yes/no log option to badips.py | Ben RUBSON | 2018-08-19 | 1 | -8/+14 | |
| | | | |