From: <los...@us...> - 2009-02-03 22:11:44
|
Revision: 725 http://fail2ban.svn.sourceforge.net/fail2ban/?rev=725&view=rev Author: lostcontrol Date: 2009-02-03 21:51:32 +0000 (Tue, 03 Feb 2009) Log Message: ----------- - Added missing semi-colon in the bind9 example. Thanks to Yaroslav Halchenko. Modified Paths: -------------- branches/FAIL2BAN-0_8/config/jail.conf Modified: branches/FAIL2BAN-0_8/config/jail.conf =================================================================== --- branches/FAIL2BAN-0_8/config/jail.conf 2009-01-27 23:39:38 UTC (rev 724) +++ branches/FAIL2BAN-0_8/config/jail.conf 2009-02-03 21:51:32 UTC (rev 725) @@ -178,7 +178,7 @@ # category security { # security_file; # }; -# } +# }; # # in your named.conf to provide proper logging. # This jail blocks UDP traffic for DNS requests. This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <bu...@us...> - 2009-08-31 13:57:39
|
Revision: 747 http://fail2ban.svn.sourceforge.net/fail2ban/?rev=747&view=rev Author: buanzo Date: 2009-08-31 13:57:32 +0000 (Mon, 31 Aug 2009) Log Message: ----------- Disabled jail lighttpd-fastcgi by default. Modified Paths: -------------- branches/FAIL2BAN-0_8/config/jail.conf Modified: branches/FAIL2BAN-0_8/config/jail.conf =================================================================== --- branches/FAIL2BAN-0_8/config/jail.conf 2009-08-30 21:07:37 UTC (rev 746) +++ branches/FAIL2BAN-0_8/config/jail.conf 2009-08-31 13:57:32 UTC (rev 747) @@ -173,7 +173,7 @@ [lighttpd-fastcgi] -enabled = true +enabled = false port = http,https filter = lighttpd-fastcgi # adapt the following two items as needed This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <yar...@us...> - 2010-06-29 01:34:15
|
Revision: 761 http://fail2ban.svn.sourceforge.net/fail2ban/?rev=761&view=rev Author: yarikoptic Date: 2010-06-29 01:34:08 +0000 (Tue, 29 Jun 2010) Log Message: ----------- disabling entirely named-refused-udp jail with a big fat warning Modified Paths: -------------- branches/FAIL2BAN-0_8/config/jail.conf Modified: branches/FAIL2BAN-0_8/config/jail.conf =================================================================== --- branches/FAIL2BAN-0_8/config/jail.conf 2010-06-22 14:33:05 UTC (rev 760) +++ branches/FAIL2BAN-0_8/config/jail.conf 2010-06-29 01:34:08 UTC (rev 761) @@ -211,15 +211,23 @@ # in your named.conf to provide proper logging. # This jail blocks UDP traffic for DNS requests. -[named-refused-udp] +# !!! WARNING !!! +# Since UDP is connectionless protocol, spoofing of IP and immitation +# of illegal actions is way too simple. Thus enabling of this filter +# might provide an easy way for implementing a DoS against a chosen +# victim. See +# http://nion.modprobe.de/blog/archives/690-fail2ban-+-dns-fail.html +# Please DO NOT USE this jail unless you know what you are doing. +# +# [named-refused-udp] +# +# enabled = false +# filter = named-refused +# action = iptables-multiport[name=Named, port="domain,953", protocol=udp] +# sendmail-whois[name=Named, dest=yo...@ma...] +# logpath = /var/log/named/security.log +# ignoreip = 168.192.0.1 -enabled = false -filter = named-refused -action = iptables-multiport[name=Named, port="domain,953", protocol=udp] - sendmail-whois[name=Named, dest=yo...@ma...] -logpath = /var/log/named/security.log -ignoreip = 168.192.0.1 - # This jail blocks TCP traffic for DNS requests. [named-refused-tcp] This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <yar...@us...> - 2010-09-27 13:10:54
|
Revision: 765 http://fail2ban.svn.sourceforge.net/fail2ban/?rev=765&view=rev Author: yarikoptic Date: 2010-09-27 13:10:48 +0000 (Mon, 27 Sep 2010) Log Message: ----------- default ignoreip to ignore entire loopback zone (/8): see http://bugs.debian.org/598200 Modified Paths: -------------- branches/FAIL2BAN-0_8/config/jail.conf Modified: branches/FAIL2BAN-0_8/config/jail.conf =================================================================== --- branches/FAIL2BAN-0_8/config/jail.conf 2010-09-27 13:10:40 UTC (rev 764) +++ branches/FAIL2BAN-0_8/config/jail.conf 2010-09-27 13:10:48 UTC (rev 765) @@ -13,7 +13,7 @@ # "ignoreip" can be an IP address, a CIDR mask or a DNS host. Fail2ban will not # ban a host which matches an address in this list. Several addresses can be # defined using space separator. -ignoreip = 127.0.0.1 +ignoreip = 127.0.0.1/8 # "bantime" is the number of seconds that a host is banned. bantime = 600 This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <yar...@us...> - 2010-09-27 13:18:39
|
Revision: 766 http://fail2ban.svn.sourceforge.net/fail2ban/?rev=766&view=rev Author: yarikoptic Date: 2010-09-27 13:18:32 +0000 (Mon, 27 Sep 2010) Log Message: ----------- spellcheck jail.conf. Thanks Christoph Anton Mitterer Modified Paths: -------------- branches/FAIL2BAN-0_8/config/jail.conf Modified: branches/FAIL2BAN-0_8/config/jail.conf =================================================================== --- branches/FAIL2BAN-0_8/config/jail.conf 2010-09-27 13:10:48 UTC (rev 765) +++ branches/FAIL2BAN-0_8/config/jail.conf 2010-09-27 13:18:32 UTC (rev 766) @@ -5,7 +5,7 @@ # $Revision$ # -# The DEFAULT allows a global definition of the options. They can be override +# The DEFAULT allows a global definition of the options. They can be overridden # in each jail afterwards. [DEFAULT] @@ -212,7 +212,7 @@ # This jail blocks UDP traffic for DNS requests. # !!! WARNING !!! -# Since UDP is connectionless protocol, spoofing of IP and immitation +# Since UDP is connection-less protocol, spoofing of IP and imitation # of illegal actions is way too simple. Thus enabling of this filter # might provide an easy way for implementing a DoS against a chosen # victim. See This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |