~ubuntu-branches/debian/wheezy/fail2ban/wheezy : changes

~ubuntu-branches/debian/wheezy/fail2ban/wheezy » Changes from revision 25

From Revision 21 to 2

Rev	Summary	Authors	Tags	Date
21	* Added pure-ftpd section to Debian's jail.conf. Thanks to ... * Added pure-ftpd section to Debian's jail.conf. Thanks to Laurent Léonard (Closes: #654412) * Enhancement: action to use /proc/net/xt_recent and run f2b as a normal user. Many many thanks to Zbyszek Szmek (Closes: #602016)	Yaroslav Halchenko	0.8.6-2	12 years ago
20	* [1efe1bc] Fresh upstream release (Closes: #648324) * [1efe1bc] Fresh upstream release (Closes: #648324) * Boosted policy compliance to 3.9.2 -- no changes * Adjusted debian/watch to fetch tarballs from github	Yaroslav Halchenko	0.8.6-1	12 years ago
19	[5242e73] BF: (cherry-picked from upstream, DEP-3 yet TODO) ... [5242e73] BF: (cherry-picked from upstream, DEP-3 yet TODO) Lock server's executeCmd to prevent racing among iptables calls (Closes: #554162) Many kudos go to Michael Saavedra for the patch	Yaroslav Halchenko	0.8.5-2	12 years ago
18	* [de95777] Fresh upstream release FAIL2BAN-0_8_5: * [de95777] Fresh upstream release FAIL2BAN-0_8_5: - [00e1827] BF: use addfailregex instead of failregex while processing per-jail "failregex" parameter (Closes: #635830) (LP: #635036) Thanks Marat Khayrullin for the patch and Daniel T Chen for forwarding to Debian. * [1cbdafc] Set backend to auto and recommends python-gamin (Closes: #524425) * [ef449f4] Added a note on diverting logrotate configuration for custom logtarget=SYSLOG (Closes: #631917). Thanks Kenyon Ralph for report	Yaroslav Halchenko	0.8.5-1	12 years ago
17	* Fresh upstream snapshot which absorbed some of the patches... * Fresh upstream snapshot which absorbed some of the patches from Debian and - [c6d64e9] debug entry for lines ignored due to falling below findtime (v2) - [fc20f12] Tai64N stores time in GMT, we need to convert to local time before returning - [b0331bb] default ignoreip to ignore entire loopback zone (/8) (Closes: #598200) - [b9f15f6] ENH: dovecot filter - [69165b1] ENH: add <chain> to action.d/iptables. Thanks Matthijs Kooijman - [8330a20] ENH: make filter.d/apache-overflows.conf catch more (Closes: #574182) - [66cc6cb] BF: allow space in the trailing of failregex for sasl.conf (Closes: #573314) - [2714019] ENH: dropbear filter (Closes: #546913) - [ea7d352] BF: Use /var/run/fail2ban instead of /tmp for temp files in actions (Closes: #544232) debian/jail.conf: - [bc8e22d] spellcheck (Closes: #598206). Thanks Christoph Anton Mitterer - [d7f3e23] adjusted description for sasl jail (Closes: #615952) - [92fb484] debian/jail.conf: closing " for protocol specification - [f828c31] debian/jail.conf: got 'chain' parameter to be specified for iptables actions (Closes: #515599) * debian/control: - [858af30] slight rewordings of the long description (Closes: #588176) - [167dfd4] Boosted policy compliance version to 3.9.1 (no changes seems to be due) * [4e1e845] debian/copyright: updated copyright years	Yaroslav Halchenko	0.8.4+svn20110323-1	13 years ago
16	* Commenting out named-refused-udp jail and providing even f... * Commenting out named-refused-udp jail and providing even fatter WARNING against using it (Closes: #583364) * Merging upstream's commit for fixing missing import	Yaroslav Halchenko	0.8.4-3	13 years ago
15	* Merged few upstream patches (svn rev ) which fixed: * Merged few upstream patches (svn rev ) which fixed: - Patch to make log file descriptors cloexec to stop leaking file descriptors on fork/exec. * debian/rules,control: -install-layout=deb for setup.py + python (>= 2.5.4-1~) to fix install with python2.6 (Closes: #571213). * Boosted policy to 3.8.4 (no changes seems to be due).	Yaroslav Halchenko	0.8.4-2	14 years ago
14	* New upstream release. Fixes compatibility issue with pytho... * New upstream release. Fixes compatibility issue with python2.6 * Yet only in Debian fixes: - escaping () in pure-ftpd. Thanks Teodor (Closes: #544744) - use "set logtarget" instead of "reload" while logrotate. Thanks J.M.Roth (Closes: #537773) - be able to detect time for VNC recording only 2 letters of year (Closes: #537610) - proftpd filter: count all failed logins regardless of the reason * Debian-specific changes: - adjusted README.Debian - multiport is default (closes: #545971) - Boosted policy to 3.8.3 (no changes seems to be due)	Yaroslav Halchenko	0.8.4-1	14 years ago
13	* Time to shake the ground with upload to unstable. * Time to shake the ground with upload to unstable. * Merged upstream's development as of SVN revision 732: - Fixed maxretry/findtime rate. Many thanks to Christos Psonis. Tracker #2019714. - Made the named-refused regex a bit less restrictive in order to match logs with "view". Thanks to Stephen Gildea. - Use timetuple instead of utctimetuple for ISO 8601. Maybe not a 100% correct fix but seems to work. Tracker #2500276. - Changed <HOST> template to be more restrictive (closes: #514163). - Added cyrus-imap and sieve filters. Thanks to Jan Wagner. (closes: #513953). - Pull a commit from Yaroslav git repo. BF: addressing added bang to ssh log (closes: #512193). - Added missing semi-colon in the bind9 example. Thanks to Yaroslav Halchenko. - Added NetBSD ipfilter (ipf command) action. Thanks to Ed Ravin. Tracker #2484115. - Improved SASL filter. Thanks to Loic Pefferkorn. Tracker #2310410. (closes: #507990) - Added CPanel date format. Thanks to David Collins. Tracker #1967610. - Added nagios script. Thanks to Sebastian Mueller. - Removed print. - Removed begin-line anchor for "standard" timestamp (closes: #500824) - Remove socket file on startup is fail2ban crashed. Thanks to Detlef Reichelt. * Added a comment into Debian-shipped jail.conf about sasl logpath -- it might preferable to monitor warn.log in case of postfix (To complete react to #507990) (git branch up/fixes). Also added sasl example log file (git branch up/log_examples). * Removing minor bashism in ipmasq example file (closes: #530078). Thanks Raphael Geissert (git branch up/ipmasq) * Allow for trailing spaces in proftpd logs (closes: #507986) (git branch up/fixes). * Removed duplicate entry for DataCha0s/2\.0 in badbots (closes: #519557) (git branch up/fixes). * Adjusted Git-vcs field to point to git:// . * Thanks lintian fixes: - Boosted policy to 3.8.2 (no changes are due). - Boosted debhelper compatibility to 5. - Misspell in README.Debian - Removing stale /var/run/fail2ban from dirs -- should be created by init script	Yaroslav Halchenko	0.8.3-6	14 years ago
12	* NF: adding unittests for previous commit * NF: adding unittests for previous commit * BF: anchoring regex for IP with " *$" at the end + adjust regexp for <HOST> (closes: #514163)	Yaroslav Halchenko	0.8.3-2sid1	15 years ago
11	* Fresh upstream release * Fresh upstream release * Boosted policy compliance to 3.8.0 (no changes needed) * Specify explicitely facilities in "Failed .. for". Thanks Dean Gaudet. (closes: #481760) * Added failregex for "User not known" in sshd.conf. thanks Alexander Gerasiov (closes: #479966)	Yaroslav Halchenko	0.8.3-1	15 years ago
10	* NEWS.Debian confusions - the latest NEWS entry and postins... * NEWS.Debian confusions - the latest NEWS entry and postinst message were rephrased (Closes: #402350) * Added mail-whois-lines action, which emails log lines containing abuser IP. Those lines are often required for proper abuse reports sent to the Internet providers. Forwarding of such received emails to the email addresses of abuse departments present in the output of whois is a tentative solution for semi-automatic abuse reporting (Closes: #358810)	Yaroslav Halchenko	0.7.5-2	17 years ago
9	* New upstream release which fixes next issues * New upstream release which fixes next issues + Socket parameter not work with other path (Closes: #400162) + fail2ban does not start with /etc/init.d/fail2ban start but with fail2ban-client start (Closes: #400278) * Removed obsolete patches left from 0.6 * Adjusted wsftpd patch to use <HOST> tag to be in line with the other filter definitions	Yaroslav Halchenko	0.7.5-1	17 years ago
8	* Reincarnated logrotate configuration (Closes: #397878) * Reincarnated logrotate configuration (Closes: #397878) * Only block new connects by using a new action iptables-new instead of iptables (Closes: #350746) * Updated README.Debian to reflect transition over to 0.7 branch and to comment on 350746 * "Clean" target removes generated .pyc files now (Closes: #398146) * Cleaned up debian/rules a bit	Yaroslav Halchenko	0.7.4-3	17 years ago
7	* Added reload/force-reload actions to init script * Added reload/force-reload actions to init script * Adjusted jail.conf a bit * Warning NEWS entry for 0.7.1 was not shown during installation on test boxes, thus postinst was adjusted accordingly to inform the user about the changes in the configuration files since 0.6.	Yaroslav Halchenko	0.7.4-2	17 years ago
6	* Adjusted manpage for fail2ban.conf to point to shipped exa... * Adjusted manpage for fail2ban.conf to point to shipped examples of configuration files as the source of details about available configuration options (closes: #382403) * Changes in man/fail2ban.conf.5 are managed via dpatch now	Yaroslav Halchenko	0.6.1-11	17 years ago
5	* Removed bashism (arrays) from init.d script to make it POS... * Removed bashism (arrays) from init.d script to make it POSIX shell complient (closes: #368218) * Added new proftpd section * Added new saslauthd section. Thanks to martin f krafft <madduck@debian.org> (closes: #369483) * Mentioned apache2 log file in Other. comment field for FILE in apache section. Nothing has to be changed besides the logfile path to work with apache2 (closes: #342144)	Yaroslav Halchenko	0.6.1-8	18 years ago
4	* ignoreip is now empty by default (closes: #347766) * ignoreip is now empty by default (closes: #347766) * increased verbosity in verbose=2 mode: now prints options accepted from the config file * to make fail2ban.conf more compact, thus to improve its readability, fail2ban.conf was converted to use "interpolations" provided by ConfigParser class. fw{start,end,{,un}ban} options were moved into DEFAULT section and required options (port, protocol) were added	Yaroslav Halchenko	0.6.0-3	18 years ago
3	fail2ban path is inserted first in the list to avoid a confl... fail2ban path is inserted first in the list to avoid a conflict with existing elsewhere modules with the same names. (Thanks for report and patch to Nick Craig-Wood) (closes: #343821)	Yaroslav Halchenko	0.6.0-2	18 years ago
2	* Merged with the latest stable upstream release. That incur... * Merged with the latest stable upstream release. That incure some changes for the Debian configuration of the package to be more upstream-like. Visible one is: subject in the sent email includes section outside of "[Fail2Ban]" * Updated README.Debian to answer possible question regarding effective bantime starting moment	Yaroslav Halchenko	0.6.0-1	18 years ago

Older »