~ubuntu-branches/ubuntu/vivid/fail2ban/vivid : changes

~ubuntu-branches/ubuntu/vivid/fail2ban/vivid » Changes from revision 30

From Revision 30 to 11

Rev	Summary	Authors	Tags	Date
30	* To become fresh upstream release (Closes: #742976) * To become fresh upstream release (Closes: #742976) - 0.9 series is quite a big leap in development, especially since 0.8.6 which made it to previous Debian stable wheezy. Please consult upstream ChangeLog about changes * debian/control - boost policy to 3.9.6	Yaroslav Halchenko	0.9.1-1	9 years ago
29	* New upstream bug-fix release: but consider 0.9.0 (to be up... * New upstream bug-fix release: but consider 0.9.0 (to be uploaded to experimental) * debian/jail: - new jail definitions: apache-modsecurity, apache-nohome, freeswitch, ejabberd-auth, ssh-blocklist, nagios - new configuration option: ignorecommand * debian/post{inst,rm},preinst: - [thanks to Daniel Schaal]: take care about renaming config files - firewall-cmd-direct-new.conf to firewallcmd-new.conf which happened in 0.8.11-29-g56b6bf7 - lighttpd-fastcgi.conf to suhosin.conf and sasl.conf to postfix-sasl.conf in the past 0.8.11 release	Yaroslav Halchenko	0.8.13-1	10 years ago
28	* Fresh upstream release * Fresh upstream release - this release tightens all shipped filters to preclude possible injections leading to targetted DoS attacks. - omitted entry for ~pre release changelog: - asterisk filter was fixed (Closes: #719662), - nginx filter/jail added (Closes: #668064) - better detection of log rotation in polling backend (Closes: #696087) - includes sever name (uname -n) into subject of sendmail actions (Closes: #709196) * debian/jail.conf - dropbear jail: use dropbear filter (instead of ssh) and monitor auth.log instead of non-existing /var/log/dropbear (Closes: #620760) * debian/NEWS - information for change of default iptables action to REJECT now (Closes: #711463) * debian/patches - changeset_d4f6ca4f8531f332bcb7ce3a89102f60afaaa08e.diff post-release change to support native proftpd date format which includes milliseconds (Closes: #648276) - changeset_ac061155f093464fb6cd2329d3d513b15c68e256.diff absorbed upstream	Yaroslav Halchenko	0.8.11-1	10 years ago
27	* Snapshot of the upcoming new release candidate * Snapshot of the upcoming new release candidate - improves dovecot (Closes: #709324), wuftpd (Closes: #665925) failregex'es - provides support for OpenSSH 6.3 (Closes: #722970) * debian/watch - restrict version matching only to numbers and period (to exclude alpha releases of 0.9 series) * debian/jail.conf - slightly adjusted for changes in master (suhosin replaced lighttpd-auth filer name, and postfix-sasl for sasl) - added nginx-http-auth. More jails to be adopted from upsream.	Yaroslav Halchenko	0.8.11~pre1+git29-gccd2657-1	10 years ago
26	* debian/jail.conf * debian/jail.conf - added "submission" (port 587) to all SMTP-related jails (Closes: #714632). Thanks Tony den Haan for the report	Yaroslav Halchenko	0.8.10-3	10 years ago
25	* New upstream release * New upstream release - addresses possible DoS for anyone enabling many of apache- filters	Yaroslav Halchenko	0.8.10-1	10 years ago
24	* New upstream release * New upstream release - significant improvements in documentation (Closes: #400416) - roundcube auth filter (Closes: #699442) - enforces C locale for dates (Closes: #686341) - provides bash_completion.d/fail2ban * debian/jail.conf: - added findtime and documentation on those basic options from jail.conf (Closes: #704568) - added new sample jails definitions for ssh-route, ssh-iptables-ipset{4,6}, roundcube-auth, sogo-auth, mysqld-auth * debian/control: - suggest system-log-daemon (Closes: #691001) - boost policy compliance to 3.9.4 * debian/rules: - run fail2ban's unittests at build time but ignore the failures (there are still some known issues to fix up to guarantee robust testing in clean chroots etc). Only pyinotify was added to build-depends since gamin might still be buggy on older releases and get stuck, which would complicate backporting	Yaroslav Halchenko	0.8.9-1	11 years ago
23	* CVE-2012-5642: Escape the content of <matches> since its v... * CVE-2012-5642: Escape the content of <matches> since its value could contain arbitrary symbols (Closes: #696184) * Since package source format remained 1.0, manpages patch (deb_manpages_reportbug) was not applied -- fold it into .diff.gz	Yaroslav Halchenko	0.8.6-3wheezy1	11 years ago
22	* Added dovecot section to Debian's jail.conf. Thanks to La... * Added dovecot section to Debian's jail.conf. Thanks to Laurent Léonard (Closes: #655182) * init.d script now returns non-0 exit codes upon status command with not running / failed to connect server. Thanks to Glenn Aaldering for the patch	Yaroslav Halchenko	0.8.6-3	12 years ago
21	* Added pure-ftpd section to Debian's jail.conf. Thanks to ... * Added pure-ftpd section to Debian's jail.conf. Thanks to Laurent Léonard (Closes: #654412) * Enhancement: action to use /proc/net/xt_recent and run f2b as a normal user. Many many thanks to Zbyszek Szmek (Closes: #602016)	Yaroslav Halchenko	0.8.6-2	12 years ago
20	* [1efe1bc] Fresh upstream release (Closes: #648324) * [1efe1bc] Fresh upstream release (Closes: #648324) * Boosted policy compliance to 3.9.2 -- no changes * Adjusted debian/watch to fetch tarballs from github	Yaroslav Halchenko	0.8.6-1	12 years ago
19	[5242e73] BF: (cherry-picked from upstream, DEP-3 yet TODO) ... [5242e73] BF: (cherry-picked from upstream, DEP-3 yet TODO) Lock server's executeCmd to prevent racing among iptables calls (Closes: #554162) Many kudos go to Michael Saavedra for the patch	Yaroslav Halchenko	0.8.5-2	12 years ago
18	* [de95777] Fresh upstream release FAIL2BAN-0_8_5: * [de95777] Fresh upstream release FAIL2BAN-0_8_5: - [00e1827] BF: use addfailregex instead of failregex while processing per-jail "failregex" parameter (Closes: #635830) (LP: #635036) Thanks Marat Khayrullin for the patch and Daniel T Chen for forwarding to Debian. * [1cbdafc] Set backend to auto and recommends python-gamin (Closes: #524425) * [ef449f4] Added a note on diverting logrotate configuration for custom logtarget=SYSLOG (Closes: #631917). Thanks Kenyon Ralph for report	Yaroslav Halchenko	0.8.5-1	12 years ago
17	* Fresh upstream snapshot which absorbed some of the patches... * Fresh upstream snapshot which absorbed some of the patches from Debian and - [c6d64e9] debug entry for lines ignored due to falling below findtime (v2) - [fc20f12] Tai64N stores time in GMT, we need to convert to local time before returning - [b0331bb] default ignoreip to ignore entire loopback zone (/8) (Closes: #598200) - [b9f15f6] ENH: dovecot filter - [69165b1] ENH: add <chain> to action.d/iptables. Thanks Matthijs Kooijman - [8330a20] ENH: make filter.d/apache-overflows.conf catch more (Closes: #574182) - [66cc6cb] BF: allow space in the trailing of failregex for sasl.conf (Closes: #573314) - [2714019] ENH: dropbear filter (Closes: #546913) - [ea7d352] BF: Use /var/run/fail2ban instead of /tmp for temp files in actions (Closes: #544232) debian/jail.conf: - [bc8e22d] spellcheck (Closes: #598206). Thanks Christoph Anton Mitterer - [d7f3e23] adjusted description for sasl jail (Closes: #615952) - [92fb484] debian/jail.conf: closing " for protocol specification - [f828c31] debian/jail.conf: got 'chain' parameter to be specified for iptables actions (Closes: #515599) * debian/control: - [858af30] slight rewordings of the long description (Closes: #588176) - [167dfd4] Boosted policy compliance version to 3.9.1 (no changes seems to be due) * [4e1e845] debian/copyright: updated copyright years	Yaroslav Halchenko	0.8.4+svn20110323-1	13 years ago
16	* Commenting out named-refused-udp jail and providing even f... * Commenting out named-refused-udp jail and providing even fatter WARNING against using it (Closes: #583364) * Merging upstream's commit for fixing missing import	Yaroslav Halchenko	0.8.4-3	13 years ago
15	* Merged few upstream patches (svn rev ) which fixed: * Merged few upstream patches (svn rev ) which fixed: - Patch to make log file descriptors cloexec to stop leaking file descriptors on fork/exec. * debian/rules,control: -install-layout=deb for setup.py + python (>= 2.5.4-1~) to fix install with python2.6 (Closes: #571213). * Boosted policy to 3.8.4 (no changes seems to be due).	Yaroslav Halchenko	0.8.4-2	14 years ago
14	* New upstream release. Fixes compatibility issue with pytho... * New upstream release. Fixes compatibility issue with python2.6 * Yet only in Debian fixes: - escaping () in pure-ftpd. Thanks Teodor (Closes: #544744) - use "set logtarget" instead of "reload" while logrotate. Thanks J.M.Roth (Closes: #537773) - be able to detect time for VNC recording only 2 letters of year (Closes: #537610) - proftpd filter: count all failed logins regardless of the reason * Debian-specific changes: - adjusted README.Debian - multiport is default (closes: #545971) - Boosted policy to 3.8.3 (no changes seems to be due)	Yaroslav Halchenko	0.8.4-1	14 years ago
13	* Time to shake the ground with upload to unstable. * Time to shake the ground with upload to unstable. * Merged upstream's development as of SVN revision 732: - Fixed maxretry/findtime rate. Many thanks to Christos Psonis. Tracker #2019714. - Made the named-refused regex a bit less restrictive in order to match logs with "view". Thanks to Stephen Gildea. - Use timetuple instead of utctimetuple for ISO 8601. Maybe not a 100% correct fix but seems to work. Tracker #2500276. - Changed <HOST> template to be more restrictive (closes: #514163). - Added cyrus-imap and sieve filters. Thanks to Jan Wagner. (closes: #513953). - Pull a commit from Yaroslav git repo. BF: addressing added bang to ssh log (closes: #512193). - Added missing semi-colon in the bind9 example. Thanks to Yaroslav Halchenko. - Added NetBSD ipfilter (ipf command) action. Thanks to Ed Ravin. Tracker #2484115. - Improved SASL filter. Thanks to Loic Pefferkorn. Tracker #2310410. (closes: #507990) - Added CPanel date format. Thanks to David Collins. Tracker #1967610. - Added nagios script. Thanks to Sebastian Mueller. - Removed print. - Removed begin-line anchor for "standard" timestamp (closes: #500824) - Remove socket file on startup is fail2ban crashed. Thanks to Detlef Reichelt. * Added a comment into Debian-shipped jail.conf about sasl logpath -- it might preferable to monitor warn.log in case of postfix (To complete react to #507990) (git branch up/fixes). Also added sasl example log file (git branch up/log_examples). * Removing minor bashism in ipmasq example file (closes: #530078). Thanks Raphael Geissert (git branch up/ipmasq) * Allow for trailing spaces in proftpd logs (closes: #507986) (git branch up/fixes). * Removed duplicate entry for DataCha0s/2\.0 in badbots (closes: #519557) (git branch up/fixes). * Adjusted Git-vcs field to point to git:// . * Thanks lintian fixes: - Boosted policy to 3.8.2 (no changes are due). - Boosted debhelper compatibility to 5. - Misspell in README.Debian - Removing stale /var/run/fail2ban from dirs -- should be created by init script	Yaroslav Halchenko	0.8.3-6	14 years ago
12	* NF: adding unittests for previous commit * NF: adding unittests for previous commit * BF: anchoring regex for IP with " *$" at the end + adjust regexp for <HOST> (closes: #514163)	Yaroslav Halchenko	0.8.3-2sid1	15 years ago
11	* Fresh upstream release * Fresh upstream release * Boosted policy compliance to 3.8.0 (no changes needed) * Specify explicitely facilities in "Failed .. for". Thanks Dean Gaudet. (closes: #481760) * Added failregex for "User not known" in sshd.conf. thanks Alexander Gerasiov (closes: #479966)	Yaroslav Halchenko	0.8.3-1	15 years ago

Older »