You can subscribe to this list here.
2005 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
(1) |
Sep
(2) |
Oct
(1) |
Nov
(1) |
Dec
|
---|---|---|---|---|---|---|---|---|---|---|---|---|
2006 |
Jan
|
Feb
(1) |
Mar
(1) |
Apr
|
May
(1) |
Jun
|
Jul
(1) |
Aug
(2) |
Sep
(2) |
Oct
|
Nov
(1) |
Dec
(2) |
2007 |
Jan
(2) |
Feb
(1) |
Mar
(1) |
Apr
(3) |
May
(2) |
Jun
|
Jul
|
Aug
(1) |
Sep
|
Oct
|
Nov
|
Dec
|
2008 |
Jan
|
Feb
|
Mar
(1) |
Apr
|
May
|
Jun
|
Jul
(1) |
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
2009 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
(1) |
Oct
|
Nov
|
Dec
|
2018 |
Jan
|
Feb
|
Mar
|
Apr
(1) |
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
From: Yaroslav H. <li...@on...> - 2018-04-05 13:44:00
|
On behalf of the tireless "Dipl. Ing. Sergey G. Brester" <se...@us...>: Hi all, here is the announce of new release of Fail2ban. - 0.10.3.1 (2018/04/04) - the-time-is-always-right-to-do-what-is-right Thanks to all contributors! Downloads: - fail2ban-0.10.3.1.tar.gz This contains many new features, bugfixes, filter actions updates, etc. See ChangeLog for complete list. By the way: also the new wiki can be found on github. Regards, sebres. -- Yaroslav O. Halchenko Center for Open Neuroscience http://centerforopenneuroscience.org Dartmouth College, 419 Moore Hall, Hinman Box 6207, Hanover, NH 03755 Phone: +1 (603) 646-9834 Fax: +1 (603) 646-1419 WWW: http://www.linkedin.com/in/yarik |
From: Cyril J. <cyr...@fa...> - 2009-09-07 19:31:56
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi all, 0.8.4 is finally here. Here is the release announcement, kindly written by Arturo 'Buanzo' Busleiman, new member of fail2ban development team: First of all: Hi! This is Arturo 'Buanzo' Busleiman. I joined the fail2ban development team a couple weeks ago, to try and fix some bugs. Apparently, I've succeeded. So, with permission of Cyril, I give you.... fail2ban 0.8.4! [1] We have both bugfixes AND new features to introduce. 0.8.4 is the first fail2ban release to work with Python 2.6. You will never see the infamous "unexpected communication problem" error message anymore (we hope). Additionally, the logging subsystem is now shutdown when it really is not needed anymore, which fixes the "cannot release un-acquired lock" issue. Christos Psonis assisted in fixing the maxretry/findtime rate problem (thank you, Christos!). On the new-features front, we have: * A fail2ban-client command to manually ban a specific IP for a certain jail (buanzo). * Two new filters: lighttpd-fastcgi and php-url-fopen (buanzo). * Added actions to report abuse to ISP, DShield and myNetWatchman. Thanks to Russell Odom. * A SuSE init script that correctly handles the socket file on crash. Thanks to Detlef Reichelt. * A Nagios script to help you integrate fail2ban with Nagios. Thanks to Sebastian Mueller. * Added NetBSD ipfilter (ipf command) action. Thanks to Ed Ravin. ... and much more! For specific details, take a look at the ChangeLog file. Thank you very much for using fail2ban. Keep those bug reports, patches and ideas coming! Many thanks to everyone who contributed to this release. As always, do not forget to visit the website [2] and contribute to the documentation. Yours, Buanzo and the Fail2ban development team [1] http://downloads.sourceforge.net/fail2ban/fail2ban-0.8.4.tar.bz2 [2] http://www.fail2ban.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkqlX5kACgkQlYy8cEwUMaRIkACeO7Adw+Ie8ZDRZqHdQfcGfRia 07gAniyM/L6G4ZSzqXwHn8gJIF677z4k =91Cj -----END PGP SIGNATURE----- |
From: Cyril J. <cyr...@fa...> - 2008-07-17 22:17:57
|
Hi fail2ban users, Here is a new release of fail2ban [1]. 0.8.3 should fix the famous "Unknown error 514" and the wrong PID in fail2ban.pid. There are a few more fixes and improvements. I have not yet applied all the patches I received. This will be done in a next release. Here is the ChangeLog: ver. 0.8.3 (2008/07/17) - stable ---------- - Process failtickets as long as failmanager is not empty. - Added "pam-generic" filter and more configuration fixes. Thanks to Yaroslav Halchenko. - Fixed socket path in redhat and suse init script. Thanks to Jim Wight. - Fixed PID file while started in daemon mode. Thanks to Christian Jobic who submitted a similar patch. - Fixed "fail2ban-client get <jail> logpath". Bug #1916986. - Added gssftpd filter. Thanks to Kevin Zembower. - Added "Day/Month/Year Hour:Minute:Second" date template. Thanks to Dennis Winter. - Fixed ignoreregex processing in fail2ban-client. Thanks to René Berber. - Added ISO 8601 date/time format. - Added and changed some logging level and messages. - Added missing ignoreregex to filters. Thanks to Klaus Lehmann. - Use poll instead of select in asyncore.loop. This should solve the "Unknown error 514". Thanks to Michael Geiger and Klaus Lehmann. As always, do not forget to visit the website [2] and contribute to the documentation. Many thanks to everyone who contributed to this release. Regards, Cyril Jaquier [1] http://downloads.sourceforge.net/fail2ban/fail2ban-0.8.3.tar.bz2 [2] http://www.fail2ban.org |
From: Cyril J. <cyr...@fa...> - 2008-03-05 23:52:32
|
Hi all, More than 6 months since the last release, 0.8.2 is finally out [1]. This one contains a lot of fixes and new features. So I hope we have not introduced to many bugs. Here are the most important things introduced in 0.8.2: - Added "full line failregex". It is now possible to match a whole line. This should avoid deny of service attacks against fail2ban. Currently only sshd.conf uses this feature. Thanks to Yaroslav Halchenko. - The default socket location is now /var/run/fail2ban. Do not forget to create this directory first. Moreover, fail2ban-server create a PID file in this directory. - New communication server using asyncore/asynchat. Fixes some issues on Solaris. - Python 2.3 support. Fail2ban 0.8.2 now runs with Python 2.3. - New log rotation detection implementation. Much simpler and less buggy. There are a lot of other fixes and features. Please look at the ChangeLog for all the details [2]. Configuration files from previous 0.8 releases are compatible with 0.8.2. So I recommend to upgrade to this version. Many thanks to everyone who contributed to this release. Regards, Cyril Jaquier [1] http://downloads.sourceforge.net/fail2ban/fail2ban-0.8.2.tar.bz2 [2] http://www.fail2ban.org |
From: Cyril J. <cyr...@fa...> - 2007-08-14 22:42:32
|
Hi all, 0.8.1 is now available [1] and fixes some security issues in the default configuration files and includes new filters and actions. The "mail" actions are now deprecated and should be replaced with "sendmail" actions. fail2ban-regex now accepts "ignoreregex". Many thanks to everyone who contributed to this release. Regards, Cyril Jaquier [1] http://downloads.sourceforge.net/fail2ban/fail2ban-0.8.1.tar.bz2 [2] http://www.fail2ban.org |
From: Yaroslav H. <li...@on...> - 2007-05-05 21:02:18
|
> I would like to thank everyone who contributed to this release. A > (hopefully complete) list is available in README [5]. Special thanks > to Yaroslav Halchenko who does a lot of work for this project. Thank you Cyril for "thanks" and thank you for all your work on fail2ban. People seems to like it ;-) 0.8.0 got uploaded to Debian unstable (aka sid), and I will prepare it for backports.org's etch version as soon as it matures enough to become a part of testing (aka lenny). Due to the incompatible format of configuration files between 0.6 and 0.8, backports.org sarge version of fail2ban will not be upgraded to 0.8. If there is an interest in running 0.8 fail2ban on sarge boxes - let me know I will compile the package for sarge and provide it from local repository. I am planning to prepare also security upload for etch fixing few issues in 0.7.5 which is present in etch, but I would encourage Debian etch people simply to use backports.org version whenever that one becomes available. For now, if you etch person and want to give a test to the latest fail2ban, here is the link to my private repository. http://itanix.rutgers.edu/rumba/dists/etch/backport/binary-all/net/fail2ban_0.8.0-1~etch0_all.deb Cheers and congratulations on a stable release ;-) hopefully no 'grave' bugs spoil it within foreseen future ;-) -- .-. =------------------------------ /v\ ----------------------------= Keep in touch // \\ (yoh@|www.)onerussian.com Yaroslav Halchenko /( )\ ICQ#: 60653192 Linux User ^^-^^ [175555] |
From: Cyril J. <cyr...@ja...> - 2007-05-03 22:02:00
|
Hi all, I'm proud to announce the release of Fail2ban 0.8.0. This is the first release of the new stable branch. The development of this release has taken about a year and is almost a complete rewrite from 0.6. A lot of new features have been added. Here are some of them: - client/server architecture - multithreading support - better configuration - date format autodetection - Gamin support - better documentation and website - support for more services Unfortunately, the configuration file of Fail2ban 0.6.x is not compatible with this release. However, default configuration files should be sufficient and writing your own filters, actions and jails should be quite straightforward [1]. The official website [2] is now powered by MediaWiki. Please, do not hesitate to contribute, discuss or edit the articles. A domain name is now dedicated to the project: fail2ban.org. If you appreciate this software, you can now donate to the project [3]. Donations will be used to pay the domain fail2ban.org and to contribute to the financing of the dedicated server where the website, nightly builds [4] and documentation are hosted. Parts of donation will go to KDE, Gnome and The Python Software Foundation. I would like to thank everyone who contributed to this release. A (hopefully complete) list is available in README [5]. Special thanks to Yaroslav Halchenko who does a lot of work for this project. 0.8.0 contains only 2 minor changes since 0.7.9. Have a look at the CHANGELOG [6] for more information. You can download the source package here [7]. I suggest you have a look at the manual [8] before using this new release. [1] http://www.fail2ban.org/wiki/index.php/HOWTO_Upgrade_from_0.6_to_0.8 [2] http://www.fail2ban.org [3] http://sourceforge.net/donate/index.php?group_id=121032 [4] http://www.fail2ban.org/nightly/ [5] http://www.fail2ban.org/wiki/index.php/README [6] http://www.fail2ban.org/wiki/index.php/ChangeLog [7] http://sourceforge.net/project/showfiles.php?group_id=121032 [8] http://www.fail2ban.org/wiki/index.php/MANUAL_0_8 Regards, Cyril Jaquier |
From: Cyril J. <cyr...@fa...> - 2007-04-20 07:33:04
|
> The only hanging issue remains is when external commands hang... is that > correct? :-) > Yes, this can still happen. I will investigate this in 0.9. > Debian sid got 0.7.9 now. Enjoy everyone. > Thank you. Cheers, Cyril |
From: Yaroslav H. <li...@on...> - 2007-04-20 01:54:40
|
You are very welcome Cyril. Thank you for fail2ban! The only hanging issue remains is when external commands hang... is that correct? :-) Debian sid got 0.7.9 now. Enjoy everyone. On Fri, 20 Apr 2007, Cyril Jaquier wrote: > Hi all, > Here is a new release candidate. Yaroslav Halchenko fixed a bug in the > "reload" command causing Fail2ban to hang. Many thanks to him. There are > a few other small fixes and improvements. If no critical bugs are > discovered, I will release 0.8 next week and start working on a new > development branch (0.9). -- .-. =------------------------------ /v\ ----------------------------= Keep in touch // \\ (yoh@|www.)onerussian.com Yaroslav Halchenko /( )\ ICQ#: 60653192 Linux User ^^-^^ [175555] |
From: Cyril J. <cyr...@fa...> - 2007-04-19 22:26:37
|
Hi all, Here is a new release candidate. Yaroslav Halchenko fixed a bug in the "reload" command causing Fail2ban to hang. Many thanks to him. There are a few other small fixes and improvements. If no critical bugs are discovered, I will release 0.8 next week and start working on a new development branch (0.9). The complete list of changes is available in the CHANGELOG. Fail2ban has a new domain name. You can now find the wiki, nightly snapshots, downloads at http://www.fail2ban.org. Please, do not hesitate to contribute, discuss or edit the wiki. The best way to see what changed on the wiki is to look at: http://www.fail2ban.org/wiki/index.php/Special:Recentchanges Many thanks to everyone who contributed to this release. Regards, Cyril Jaquier |
From: Cyril J. <cyr...@fa...> - 2007-03-21 22:06:14
|
Hi all, Here is a new release candidate. A bug in the date detector has been fixed and a few new filters/actions have been added. 0.8 is quite close now. The complete list of changes is available in the CHANGELOG. Fail2ban has a new domain name. You can now find the wiki, nightly snapshots, downloads at http://www.fail2ban.org. Please, do not hesitate to contribute, discuss or edit the wiki. The best way to see what changed on the wiki is to look at: http://www.fail2ban.org/wiki/index.php/Special:Recentchanges Many thanks to everyone who contributed to this release. Regards, Cyril Jaquier |
From: Cyril J. <cyr...@fa...> - 2007-02-08 23:05:06
|
Hi all, I'm proud to announce the release of the version 0.7.7 of Fail2ban, the first and hopefully the only release candidate. There is almost no bug fixes in this release. Here is a short summary of the changes: 1) fail2ban-regex has been completely rewritten and can now accept both log file and filter file. This should help testing regular expressions. 2) Cacti template and script in order to graph failed and banned hits. 3) some new filter and action scripts. 4) fail2ban-client status <jail> now display the currently banned IP addresses. The complete list of changes is available in the CHANGELOG. Fail2ban has a new domain name. You can now find the wiki, nightly snapshots, downloads at http://www.fail2ban.org. Please, do not hesitate to contribute, discuss or edit the wiki. The best way to see what changed on the wiki is to look at: http://www.fail2ban.org/wiki/index.php/Special:Recentchanges Many thanks to everyone who contributed to this release. Cheers, Cyril Jaquier |
From: Cyril J. <cyr...@bl...> - 2007-01-19 00:48:20
|
Hi all, I rent a dedicated server for 2 weeks now and I decided to migrate the wiki on it. I registered fail2ban.org too. So I can finally upgrade Mediawiki to 1.9 (Sourceforge hosting had only PHP4) and the wiki should be more responsive now. I still have to migrate nightly builds and documentation. The DNS may take some time to propagate. I'm quite busy these days with work, snowboarding and this new server. So sorry for possible late replies. And no... I have not install Fail2ban on this server yet ;) But I will, my auth.log is already full of break-in attempts :/ Cheers, Cyril Jaquier |
From: Cyril J. <cyr...@bl...> - 2007-01-04 16:02:47
|
Hi all, Here is a new beta release of Fail2ban. This version is still considered as beta because two important changes appear in this release: 1) The installation directory moved from /usr/lib/fail2ban to /usr/share/fail2ban 2) "failregex" and "ignoreregex" now support multiple regular expressions This release contains a few minor bug fixes too. Please look at the CHANGELOG for a more complete list of changes. Focus is still on documentation. Any help in this area would be appreciate (howto, FAQ, corrections of my poor English, etc). This can be done directly by editing the wiki. I created several new pages on the wiki. They are regrouped here: http://fail2ban.sourceforge.net/wiki/index.php/Category:Configuration The idea is to list in these pages the logging messages that should be matched by Fail2ban. And this for each service/software. The goal is to provide the best regular expressions which match these messages. The proposed regular expressions can be discussed on the discussion page of each software. Please, do not hesitate to contribute, discuss or edit the wiki. The best way to see what changed on the wiki is to look at: http://fail2ban.sourceforge.net/wiki/index.php/Special:Recentchanges Many thanks to everyone who contributed to this release. Cheers, Cyril Jaquier |
From: Cyril J. <cyr...@bl...> - 2006-12-11 22:50:37
|
Hi all, This new release fix a few bugs and a vulnerability (CVE-2006-6302). The new "locale" option should help user with bug #1457620. Please do not forget to update your configuration file in order to fix CVE-2006-6302. Old configuration file will still work but you will get a warning. Please take the provided configuration files as examples. All users should upgrade to this version. The Debian packages are not affected by this security issue. CVE-2006-6302: http://www.frsirt.com/english/advisories/2006/4877 Homepage: http://fail2ban.sourceforge.net Cheers, Cyril Jaquier |
From: Cyril J. <cyr...@bl...> - 2006-12-07 23:08:27
|
Hi all, Here is a new beta release of Fail2ban. This version contains mostly bug fixes. A new option, "ignoreregex", has been added too. Please look at the CHANGELOG for a more complete list of changes. This version seems to be quite stable. The next releases should be release candidates. Yaroslav Halchenko who maintains the Debian package of Fail2ban is now an official Debian Maintainer. Congratulations and many thanks to him for his work on Fail2ban. It seems that the commit notifications are finally working now. I still have to do some tests but it looks promising. If you want to get commit notifications, subscribe to fail2ban-commit: http://lists.sourceforge.net/mailman/listinfo/fail2ban-commit Here are some other links too: Manual: http://fail2ban.sourceforge.net/wiki/index.php/MANUAL_0_8 Howto: http://fail2ban.sourceforge.net/wiki/index.php/HOWTO_fail2ban_0.7.x Homepage: http://fail2ban.sourceforge.net Cheers, Cyril Jaquier |
From: Cyril J. <cyr...@bl...> - 2006-11-01 22:33:31
|
Hi, Here is a new beta release of Fail2ban. This version adds more actions, filters and date templates. There is quite a lot of bug fixes and small improvements too. Please look at the ChangeLog for a more complete list of changes. Fail2ban 0.7.4 contains all the major features for 0.8. I need more feedback and bug reports. So please, test it ;) Downloads: http://fail2ban.sourceforge.net/wiki/index.php/Downloads Manual: http://fail2ban.sourceforge.net/wiki/index.php/MANUAL_0_8 Howto: http://fail2ban.sourceforge.net/wiki/index.php/HOWTO_fail2ban_0.7.x Homepage: http://fail2ban.sourceforge.net Regards, Cyril Jaquier |
From: Cyril J. <cyr...@bl...> - 2006-09-28 20:35:04
|
Hi all, A new release is available. 0.7.3 contains two new major features. Fail2ban can now take advantage of Gamin if available and can watch several files in one jail. "logpath" supports wildcards. Look at the ChangeLog for a complete list of changes. Howto: http://fail2ban.sourceforge.net/wiki/index.php/HOWTO_fail2ban_0.7.x Homepage: http://fail2ban.sourceforge.net Gamin: http://www.gnome.org/~veillard/gamin/ Regards, Cyril Jaquier |
From: Cyril J. <cyr...@bl...> - 2006-09-10 22:08:50
|
Hi all, Here is a new development release with pretty much improvements. "timeregex" and "timepattern" are no more required in filters because a date detector has been added. An interactive mode, a new tool, fail2ban-regex, and better client output are also part of this release. Please look at the ChangeLog for a complete list of changes. Look at "jail.conf" which contains some jail templates. Fail2ban 0.7.2 is considered beta software. I need feedback and bug reports. So please, test it ;) Howto: http://fail2ban.sourceforge.net/wiki/index.php/HOWTO_fail2ban_0.7.x Homepage: http://fail2ban.sourceforge.net Regards, Cyril Jaquier |
From: Cyril J. <cyr...@bl...> - 2006-08-23 21:17:53
|
Hi, A few critical bugs were found in 0.7.0. A new release is available which should fix them. I need feedbacks and bug reports. So please, test it ;) Howto: http://fail2ban.sourceforge.net/wiki/index.php/HOWTO_fail2ban_0.7.x Homepage: http://fail2ban.sourceforge.net Regards, Cyril Jaquier |
From: Cyril J. <cyr...@bl...> - 2006-08-22 22:46:01
|
Hi, Here is the first release of the new 0.7.x branch. This is almost a complete rewrite of Fail2ban with multithreading, client/server, better configuration files, etc. You can get more information on the website. There is still a lot of work before 0.8.0 but it should already run correctly. Fail2ban 0.7.0 is considered alpha software. I need feedback and bug reports. So please, test it ;) And do not hesitate to contribute with documentation, patches, bug reports and feedbacks. You can find a quick howto on the website: http://fail2ban.sourceforge.net/wiki/index.php/HOWTO_fail2ban_0.7.x Homepage: http://fail2ban.sourceforge.net Regards, Cyril Jaquier |
From: Cyril J. <cyr...@bl...> - 2006-07-16 22:27:10
|
Hi, I've created a new mailing list where you can get notifications about Fail2ban commits: fai...@li... You can subscribe to this list here: https://lists.sourceforge.net/lists/listinfo/fail2ban-commit Thank you Cyril Jaquier |
From: Cyril J. <cyr...@bl...> - 2006-05-09 22:46:44
|
Hi, Fail2ban website is now powered by the latest version of MediaWiki. This should improve users communication and increase documentation quality. Feel free to improve it ;) http://fail2ban.sf.net Regards, Cyril Jaquier P.S. Old page is available at http://fail2ban.sf.net/index-old.html |
From: Cyril J. <cyr...@bl...> - 2006-03-16 19:25:30
|
Hi, Fail2ban 0.6.1 is out. It contains a few bug fixes and some new features. Have a look at the changelog file for more details. We are now working on a new version with a lot of new features. fail2ban-0.6.1 is the current stable version. It has been well tested and should not contain severe bugs. ver. 0.6.1 (2006/03/16) - stable ---------- - Added permanent banning. Set banTime to a negative value to enable this feature (-1 is perfect). Thanks to Mannone - Fixed locale bug. Thanks to Fernando Jos=C3=A9 - Fixed crash when time format does not match data - Propagated patch from Debian to fix fail2ban search path addition to the path search list: now it is added first. Thanks to Nick Craig-Wood - Added SMTP authentification for mail notification. Thanks to Markus Hoffmann - Removed debug mode as it is confusing for people - Added parsing of timestamp in TAI64N format (#1275325). Thanks to Mark Edgington - Added patch #1382936 (Default formatted syslog logging). Thanks to Patrick B=F6rjesson - Removed 192.168.0.0/16 from ignoreip. Attacks could also come from the local network. - Robust startup: if iptables module does not get fully initialized after startup of fail2ban, fail2ban will do "maxreinit" attempts to initialize its own firewall. It will sleep between attempts for "polltime" number of seconds (closes Debian: #334272). Thanks to Yaroslav Halchenko - Added "interpolations" in fail2ban.conf. This is provided by the ConfigParser module. Old configuration files still work. Thanks to Yaroslav Halchenko - Added initial support for hosts.deny and shorewall. Need more testing. Please test. Thanks to kojiro from Gentoo forum for hosts.deny support - Added support for vsftpd. Thanks to zugeschmiert Homepage: http://fail2ban.sourceforge.net Cyril Jaquier |
From: Cyril J. <cyr...@bl...> - 2006-02-11 22:21:52
|
Hi, In order to get more people trying pre-release/CVS versions, I added nightly snapshots and an ebuild for CVS version. Nightly snapshots `-> http://fail2ban.sourceforge.net/nightly Ebuild for Fail2ban CVS `-> http://fail2ban.sourceforge.net/ebuilds/fail2ban-20060211.ebuild Feel free to test them ;) A+ Cyril Jaquier |