Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

fail2ban-0.11.2-2.1 RPM for noarch

From OpenSuSE Ports Tumbleweed for noarch

Name: fail2ban Distribution: openSUSE:Factory:zSystems
Version: 0.11.2 Vendor: obs://build.opensuse.org/openSUSE:Factory:zSystems
Release: 2.1 Build date: Wed Aug 25 21:41:35 2021
Group: Productivity/Networking/Security Build host: s390zl26
Size: 1426962 Source RPM: fail2ban-0.11.2-2.1.src.rpm
Url: http://www.fail2ban.org/
Summary: Bans IP addresses that make too many authentication failures
Fail2ban scans log files like /var/log/messages and bans IP
addresses that makes too many password failures. It updates firewall rules to
reject the IP address, can send e-mails, or set host.deny entries.  These rules
can be defined by the user. Fail2Ban can read multiple log files such as sshd
or Apache web server ones.

Provides

Requires

License

GPL-2.0-or-later

Changelog

* Tue Aug 24 2021 Johannes Weberhofer <jweberhofer@weberhofer.at>
  - Added fail2ban-0.11.2-upstream-patch-for-CVE-2021-32749.patch
    to fixs CVE-2021-32749 - bnc#1188610 to prevent a command injection via mail comand
* Sat Dec 05 2020 Johannes Weberhofer <jweberhofer@weberhofer.at>
  - Integrate change to resolve bnc#1146856 and bnc#1180738
* Sun Nov 29 2020 Johannes Weberhofer <jweberhofer@weberhofer.at>
  - Update to 0.11.2
    increased stability, filter and action updates
  - New Features and Enhancements
    * fail2ban-regex:
    - speedup formatted output (bypass unneeded stats creation)
    - extended with prefregex statistic
    - more informative output for `datepattern` (e. g. set from filter) - pattern : description
    * parsing of action in jail-configs considers space between action-names as separator also
    (previously only new-line was allowed), for example `action = a b` would specify 2 actions `a` and `b`
    * new filter and jail for GitLab recognizing failed application logins (gh#fail2ban/fail2ban#2689)
    * new filter and jail for Grafana recognizing failed application logins (gh#fail2ban/fail2ban#2855)
    * new filter and jail for SoftEtherVPN recognizing failed application logins (gh#fail2ban/fail2ban#2723)
    * `filter.d/guacamole.conf` extended with `logging` parameter to follow webapp-logging if it's configured
      (gh#fail2ban/fail2ban#2631)
    * `filter.d/bitwarden.conf` enhanced to support syslog (gh#fail2ban/fail2ban#2778)
    * introduced new prefix `{UNB}` for `datepattern` to disable word boundaries in regex;
    * datetemplate: improved anchor detection for capturing groups `(^...)`;
    * datepattern: improved handling with wrong recognized timestamps (timezones, no datepattern, etc)
    as well as some warnings signaling user about invalid pattern or zone (gh#fail2ban/fail2ban#2814):
    - filter gets mode in-operation, which gets activated if filter starts processing of new messages;
      in this mode a timestamp read from log-line that appeared recently (not an old line), deviating too much
      from now (up too 24h), will be considered as now (assuming a timezone issue), so could avoid unexpected
      bypass of failure (previously exceeding `findtime`);
    - better interaction with non-matching optional datepattern or invalid timestamps;
    - implements special datepattern `{NONE}` - allow to find failures totally without date-time in log messages,
      whereas filter will use now as timestamp (gh#fail2ban/fail2ban#2802)
    * performance optimization of `datepattern` (better search algorithm in datedetector, especially for single template);
    * fail2ban-client: extended to unban IP range(s) by subnet (CIDR/mask) or hostname (DNS), gh#fail2ban/fail2ban#2791;
    * extended capturing of alternate tags in filter, allowing combine of multiple groups to single tuple token with new tag
      prefix `<F-TUPLE_`, that would combine value of `<F-V>` with all value of `<F-TUPLE_V?_n?>` tags (gh#fail2ban/fail2ban#2755)
  - Fixes
    * [stability] prevent race condition - no ban if filter (backend) is continuously busy if
      too many messages will be found in log, e. g. initial scan of large log-file or journal (gh#fail2ban/fail2ban#2660)
    * pyinotify-backend sporadically avoided initial scanning of log-file by start
    * python 3.9 compatibility (and Travis CI support)
    * restoring a large number (500+ depending on files ulimit) of current bans when using PyPy fixed
    * manual ban is written to database, so can be restored by restart (gh#fail2ban/fail2ban#2647)
    * `jail.conf`: don't specify `action` directly in jails (use `action_` or `banaction` instead)
    * no mails-action added per default anymore (e. g. to allow that `action = %(action_mw)s` should be specified
      per jail or in default section in jail.local), closes gh#fail2ban/fail2ban#2357
    * ensure we've unique action name per jail (also if parameter `actname` is not set but name deviates from standard name, gh#fail2ban/fail2ban#2686)
    * don't use `%(banaction)s` interpolation because it can be complex value (containing `[...]` and/or quotes),
      so would bother the action interpolation
    * fixed type conversion in config readers (take place after all interpolations get ready), that allows to
      specify typed parameters variable (as substitutions) as well as to supply it in other sections or as init parameters.
    * `action.d/*-ipset*.conf`: several ipset actions fixed (no timeout per default anymore), so no discrepancy
      between ipset and fail2ban (removal from ipset will be managed by fail2ban only, gh#fail2ban/fail2ban#2703)
    * `action.d/cloudflare.conf`: fixed `actionunban` (considering new-line chars and optionally real json-parsing
    with `jq`, gh#fail2ban/fail2ban#2140, gh#fail2ban/fail2ban#2656)
    * `action.d/nftables.conf` (type=multiport only): fixed port range selector, replacing `:` with `-` (gh#fail2ban/fail2ban#2763)
    * `action.d/firewallcmd-*.conf` (multiport only): fixed port range selector, replacing `:` with `-` (gh#fail2ban/fail2ban#2821)
    * `action.d/bsd-ipfw.conf`: fixed selection of rule-no by large list or initial `lowest_rule_num` (gh#fail2ban/fail2ban#2836)
    * `filter.d/common.conf`: avoid substitute of default values in related `lt_*` section, `__prefix_line`
      should be interpolated in definition section (inside the filter-config, gh#fail2ban/fail2ban#2650)
    * `filter.d/dovecot.conf`:
    - add managesieve and submission support (gh#fail2ban/fail2ban#2795);
    - accept messages with more verbose logging (gh#fail2ban/fail2ban#2573);
    * `filter.d/courier-smtp.conf`: prefregex extended to consider port in log-message (gh#fail2ban/fail2ban#2697)
    * `filter.d/traefik-auth.conf`: filter extended with parameter mode (`normal`, `ddos`, `aggressive`) to handle
      the match of username differently (gh#fail2ban/fail2ban#2693):
    - `normal`: matches 401 with supplied username only
    - `ddos`: matches 401 without supplied username only
    - `aggressive`: matches 401 and any variant (with and without username)
    * `filter.d/sshd.conf`: normalizing of user pattern in all RE's, allowing empty user (gh#fail2ban/fail2ban#2749)
  - Rebased patches
  - Removed upstream patch fail2ban-0.10.4-upstream-pid-file-location.patch
* Wed Aug 19 2020 Dominique Leuenberger <dimstar@opensuse.org>
  - Use %{_tmpfilesdir} consistently throughout the .spec.
* Thu May 21 2020 Paolo Stivanin <info@paolostivanin.com>
  - Update to 0.11.1:
    * Increment ban time (+ observer) functionality introduced.
    * Database functionality extended with bad ips.
    * New tags (usable in actions):
    - `<bancount>` - ban count of this offender if known as bad
      (started by 1 for unknown)
    - `<bantime>` - current ban-time of the ticket
      (prolongation can be retarded up to 10 sec.)
    * Introduced new action command `actionprolong` to prolong ban-time
      (e. g. set new timeout if expected);
    * algorithm of restore current bans after restart changed:
      update the restored ban-time (and therefore
      end of ban) of the ticket with ban-time of jail (as maximum),
      for all tickets with ban-time greater (or persistent)
    * added new setup-option `--without-tests` to skip building
      and installing of tests files (gh-2287).
    * added new command `fail2ban-client get <JAIL> banip ?sep-char|--with-time?`
      to get the banned ip addresses (gh-1916).
    * purge database will be executed now (within observer).
    restoring currently banned ip after service restart fixed
      (now < timeofban + bantime), ignore old log failures (already banned)
    * upgrade database: update new created table `bips` with entries
      from table `bans` (allows restore current bans after
      upgrade from version <= 0.10)
* Thu Jan 09 2020 Dominique Leuenberger <dimstar@opensuse.org>
  - Switch to use python3 (upstream supported):
    + BuildRequire python3-tools instead of python-devel (for the
      2to3 tool).
    + Drop the python-gamin dependency.
    + Replace all python-FOO deps for their python3-FOO counterpart.
* Mon Aug 12 2019 Johannes Weberhofer <jweberhofer@weberhofer.at>
  - Added fail2ban-0.10.4-env-script-interpreter.patch to define interpretor
  - removal of SuSEfirewall2-fail2ban for factory versions since SuSEfirewall2
    will be removed from Factory (see sr#713247):
    * fail2ban-opensuse-service.patch: removed references to SuSEfirewall2 service
    * fail2ban-opensuse-service-sfw.patch: use references to SuSEfirewall2 only for
      older distributions
    * Removed installation recommendation of the fail2ban-SuSEfirewall2
      package for all distributions as it is deprecated.
  - fail2ban-0.10.4-upstream-pid-file-location.patch changed fail2ban unit file
    location (boo#1145181, gh#fail2ban/fail2ban#2474)
* Tue Jun 11 2019 Dominique Leuenberger <dimstar@opensuse.org>
  - BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
    shortcut the build queues by allowing usage of systemd-mini
* Sat Feb 16 2019 chris@computersalat.de
  - ver. 0.10.4 (2018/10/04) - ten-four-on-due-date-ten-four
    * https://github.com/fail2ban/fail2ban/blob/0.10.4/ChangeLog
  - Fixes
    * `filter.d/dovecot.conf`:
    - failregex enhancement to catch sql password mismatch errors (gh-2153);
    - disconnected with "proxy dest auth failed" (gh-2184);
    * `filter.d/freeswitch.conf`:
    - provide compatibility for log-format from gh-2193:
    * extended with new default date-pattern `^(?:%%Y-)?%%m-%%d[ T]%%H:%%M:%%S(?:\.%%f)?` to cover
      `YYYY-mm-dd HH:MM::SS.ms` as well as `mm-dd HH:MM::SS.ms` (so year is optional);
    * more optional arguments in log-line (so accept [WARN] as well as [WARNING] and optional [SOFIA] hereafter);
    - extended with mode parameter, allows to avoid matching of messages like `auth challenge (REGISTER)`
      (see gh-2163) (currently `extra` as default to be backwards-compatible), see comments in filter
      how to set it to mode `normal`.
    * `filter.d/domino-smtp.conf`:
    - recognizes failures logged using another format (something like session-id, IP enclosed in square brackets);
    - failregex extended to catch connections rejected for policy reasons (gh-2228);
    * `action.d/hostsdeny.conf`: fix parameter in config (dynamic parameters stating with '_' are protected
      and don't allowed in command-actions), see gh-2114;
    * decoding stability fix by wrong encoded characters like utf-8 surrogate pairs, etc (gh-2171):
    - fail2ban running in the preferred encoding now (as default encoding also within python 2.x), mostly
      `UTF-8` in opposite to `ascii` previously, so minimizes influence of implicit conversions errors;
    - actions: avoid possible conversion errors on wrong-chars by replace tags;
    - database: improve adapter/converter handlers working on invalid characters in sense of json and/or sqlite-database;
      additionally both are exception-safe now, so avoid possible locking of database (closes gh-2137);
    - logging in fail2ban is process-wide exception-safe now.
    * repaired start-time of initial seek to time (as well as other log-parsing related data),
      if parameter `logpath` specified before `findtime`, `backend`, `datepattern`, etc (gh-2173)
    * systemd: fixed type error on option `journalflags`: an integer is required (gh-2125);
  - New Features
    * new option `ignorecache` to improve performance of ignore failure check (using caching of `ignoreip`,
      `ignoreself` and `ignorecommand`), see `man jail.conf` for syntax-example;
    * `ignorecommand` extended to use actions-similar replacement (capable to interpolate
      all possible tags like `<ip-host>`, `<family>`, `<fid>`, `F-USER` etc.)
  - Enhancements
    * `filter.d/dovecot.conf`: extended with tags F-USER (and alternatives) to collect user-logins (gh-2168)
    * since v.0.10.4, fail2ban-client, fail2ban-server and fail2ban-regex will return version without logo info,
      additionally option `-V` can be used to get version in normalized machine-readable short format.
  - rebase patches
    * fail2ban-opensuse-locations.patch
    * fail2ban-opensuse-service.patch
  - add signature file
* Sat Apr 21 2018 jweberhofer@weberhofer.at
  - Updated to version 0.10.3.1. Changelog:
    https://github.com/fail2ban/fail2ban/blob/0.10.3.1/ChangeLog
    * fixed JSON serialization for the set-object within dump into database (gh-2103).
  - Updated to version 0.10.3. Changelog:
    https://github.com/fail2ban/fail2ban/blob/0.10.3/ChangeLog
  - Fixes
    * `filter.d/asterisk.conf`: fixed failregex prefix by log over remote syslog server (gh-2060);
    * `filter.d/exim.conf`: failregex extended - SMTP call dropped: too many syntax or protocol errors (gh-2048);
    * `filter.d/recidive.conf`: fixed if logging into systemd-journal (SYSLOG) with daemon name in prefix, gh-2069;
    * `filter.d/sendmail-auth.conf`, `filter.d/sendmail-reject.conf` :
    - fixed failregex, sendmail uses prefix 'IPv6:' logging of IPv6 addresses (gh-2064);
    * `filter.d/sshd.conf`:
    - failregex got an optional space in order to match new log-format (see gh-2061);
    - fixed ddos-mode regex to match refactored message (some versions can contain port now, see gh-2062);
    - fixed root login refused regex (optional port before preauth, gh-2080);
    - avoid banning of legitimate users when pam_unix used in combination with other password method, so
      bypass pam_unix failures if accepted available for this user gh-2070;
    - amend to gh-1263 with better handling of multiple attempts (failures for different user-names recognized immediatelly);
    - mode `ddos` (and `aggressive`) extended to catch `Connection closed by ... [preauth]`, so in DDOS mode
      it counts failure on closing connection within preauth-stage (gh-2085);
    * `action.d/abuseipdb.conf`: fixed curl cypher errors and comment quote-issue (gh-2044, gh-2101);
    * `action.d/badips.py`: implicit convert IPAddr to str, solves an issue "expected string, IPAddr found" (gh-2059);
    * `action.d/hostsdeny.conf`: fixed IPv6 syntax (enclosed in square brackets, gh-2066);
    * (Free)BSD ipfw actionban fixed to allow same rule added several times (gh-2054);
  - New Features
    * several stability and performance optimizations, more effective filter parsing, etc;
    * stable runnable within python versions 3.6 (as well as within 3.7-dev);
  - Enhancements
    * `filter.d/apache-auth.conf`: detection of Apache SNI errors resp. misredirect attempts (gh-2017, gh-2097);
    * `filter.d/apache-noscript.conf`: extend failregex to match "Primary script unknown", e. g. from php-fpm (gh-2073);
    * date-detector extended with long epoch (`LEPOCH`) to parse milliseconds/microseconds posix-dates (gh-2029);
    * possibility to specify own regex-pattern to match epoch date-time, e. g. `^\[{EPOCH}\]` or `^\[{LEPOCH}\]` (gh-2038);
      the epoch-pattern similar to `{DATE}` patterns does the capture and cuts out the match of whole pattern from the log-line,
      e. g. date-pattern `^\[{LEPOCH}\]\s+:` will match and cut out `[1516469849551000] :` from begin of the log-line.
    * badips.py now uses https instead of plain http when requesting badips.com (gh-2057);
    * add support for "any" badips.py bancategory, to be able to retrieve IPs from all categories with a desired score (gh-2056);
    * Introduced new parameter `padding` for logging within fail2ban-server (default on, excepting SYSLOG):
      Usage `logtarget = target[padding=on|off]`
* Tue Feb 20 2018 jweberhofer@weberhofer.at
  - Updated to version 0.10.2. Changelog:
    https://github.com/fail2ban/fail2ban/blob/0.10.2/ChangeLog
  - rebased patch
  - Incompatibility list (compared to v.0.9):
    * Filter (or `failregex`) internal capture-groups:
    - If you've your own `failregex` or custom filters using conditional match `(?P=host)`, you should
      rewrite the regex like in example below resp. using `(?:(?P=ip4)|(?P=ip6)` instead of `(?P=host)`
      (or `(?:(?P=ip4)|(?P=ip6)|(?P=dns))` corresponding your `usedns` and `raw` settings).
      Of course you can always define your own capture-group (like below `_cond_ip_`) to do this.
      testln="1500000000 failure from 192.0.2.1: bad host 192.0.2.1"
      fail2ban-regex "$testln" "^\s*failure from (?P<_cond_ip_><HOST>): bad host (?P=_cond_ip_)$"
    - New internal groups (currently reserved for internal usage):
      `ip4`, `ip6`, `dns`, `fid`, `fport`, additionally `user` and another captures in lower case if
      mapping from tag `<F-*>` used in failregex (e. g. `user` by `<F-USER>`).
    * v.0.10 uses more precise date template handling, that can be theoretically incompatible to some
      user configurations resp. `datepattern`.
    * Since v0.10 fail2ban supports the matching of the IPv6 addresses, but not all ban actions are
      IPv6-capable now.
  - Incompatibility:
    * The configuration for jails using banaction `pf` can be incompatible after upgrade, because pf-action uses
      anchors now (see `action.d/pf.conf` for more information). If you want use obsolete handling without anchors,
      just rewrite it in the `jail.local` by overwrite of `pfctl` parameter, e. g. like `banaction = pf[pfctl="pfctl"]`.
  - Fixes
    * Fixed logging to systemd-journal: new logtarget value SYSOUT can be used instead of STDOUT, to avoid
      write of the time-stamp, if logging to systemd-journal from foreground mode (gh-1876)
    * Fixed recognition of the new date-format on mysqld-auth filter (gh-1639)
    * jail.conf: port `imap3` replaced with `imap` everywhere, since imap3 is not a standard port and old rarely
      (if ever) used and can missing on some systems (e. g. debian stretch), see gh-1942.
    * config/paths-common.conf: added missing initial values (and small normalization in config/paths-*.conf)
      in order to avoid errors while interpolating (e. g. starting with systemd-backend), see gh-1955.
    * `action.d/pf.conf`:
    - fixed syntax error in achnor definition (documentation, see gh-1919);
    - enclose ports in braces for multiport jails (see gh-1925);
    * `action.d/firewallcmd-ipset.conf`: fixed create of set for ipv6 (missing `family inet6`, gh-1990)
    * `filter.d/sshd.conf`:
    - extended failregex for modes "extra"/"aggressive": now finds all possible (also future)
      forms of "no matching (cipher|mac|MAC|compression method|key exchange method|host key type) found",
      see "ssherr.c" for all possible SSH_ERR_..._ALG_MATCH errors (gh-1943, gh-1944);
    - fixed failregex in order to avoid banning of legitimate users with multiple public keys (gh-2014, gh-1263);
  - New Features
    * datedetector: extended default date-patterns (allows extra space between the date and time stamps);
      introduces 2 new format directives (with corresponding %Ex prefix for more precise parsing):
    - %k - one- or two-digit number giving the hour of the day (0-23) on a 24-hour clock,
      (corresponds %H, but allows space if not zero-padded).
    - %l - one- or two-digit number giving the hour of the day (12-11) on a 12-hour clock,
      (corresponds %I, but allows space if not zero-padded).
    * `filter.d/exim.conf`: added mode `aggressive` to ban flood resp. DDOS-similar failures (gh-1983);
  - New Actions:
    * `action.d/nginx-block-map.conf` - in order to ban not IP-related tickets via nginx (session blacklisting in
      nginx-location with map-file);
    - Enhancements
    * jail.conf: extended with new parameter `mode` for the filters supporting it (gh-1988);
    * action.d/pf.conf: extended with bulk-unban, command `actionflush` in order to flush all bans at once.
    * Introduced new parameters for logging within fail2ban-server (gh-1980).
      Usage `logtarget = target[facility=..., datetime=on|off, format="..."]`:
    - `facility` - specify syslog facility (default `daemon`, see https://docs.python.org/2/library/logging.handlers.html#sysloghandler
      for the list of facilities);
    - `datetime` - add date-time to the message (default on, ignored if `format` specified);
    - `format` - specify own format how it will be logged, for example for short-log into STDOUT:
      `fail2ban-server -f --logtarget 'stdout[format="%(relativeCreated)5d | %(message)s"]' start`;
    * Automatically recover or recreate corrupt persistent database (e. g. if failed to open with
      'database disk image is malformed'). Fail2ban will create a backup, try to repair the database,
      if repair fails - recreate new database (gh-1465, gh-2004).

Files

/etc/fail2ban
/etc/fail2ban/action.d
/etc/fail2ban/action.d/abuseipdb.conf
/etc/fail2ban/action.d/apf.conf
/etc/fail2ban/action.d/badips.conf
/etc/fail2ban/action.d/badips.py
/etc/fail2ban/action.d/blocklist_de.conf
/etc/fail2ban/action.d/bsd-ipfw.conf
/etc/fail2ban/action.d/cloudflare.conf
/etc/fail2ban/action.d/complain.conf
/etc/fail2ban/action.d/dshield.conf
/etc/fail2ban/action.d/dummy.conf
/etc/fail2ban/action.d/firewallcmd-allports.conf
/etc/fail2ban/action.d/firewallcmd-common.conf
/etc/fail2ban/action.d/firewallcmd-ipset.conf
/etc/fail2ban/action.d/firewallcmd-multiport.conf
/etc/fail2ban/action.d/firewallcmd-new.conf
/etc/fail2ban/action.d/firewallcmd-rich-logging.conf
/etc/fail2ban/action.d/firewallcmd-rich-rules.conf
/etc/fail2ban/action.d/helpers-common.conf
/etc/fail2ban/action.d/hostsdeny.conf
/etc/fail2ban/action.d/ipfilter.conf
/etc/fail2ban/action.d/ipfw.conf
/etc/fail2ban/action.d/iptables-allports.conf
/etc/fail2ban/action.d/iptables-common.conf
/etc/fail2ban/action.d/iptables-ipset-proto4.conf
/etc/fail2ban/action.d/iptables-ipset-proto6-allports.conf
/etc/fail2ban/action.d/iptables-ipset-proto6.conf
/etc/fail2ban/action.d/iptables-multiport-log.conf
/etc/fail2ban/action.d/iptables-multiport.conf
/etc/fail2ban/action.d/iptables-new.conf
/etc/fail2ban/action.d/iptables-xt_recent-echo.conf
/etc/fail2ban/action.d/iptables.conf
/etc/fail2ban/action.d/mail-buffered.conf
/etc/fail2ban/action.d/mail-whois-common.conf
/etc/fail2ban/action.d/mail-whois-lines.conf
/etc/fail2ban/action.d/mail-whois.conf
/etc/fail2ban/action.d/mail.conf
/etc/fail2ban/action.d/mynetwatchman.conf
/etc/fail2ban/action.d/netscaler.conf
/etc/fail2ban/action.d/nftables-allports.conf
/etc/fail2ban/action.d/nftables-multiport.conf
/etc/fail2ban/action.d/nftables.conf
/etc/fail2ban/action.d/nginx-block-map.conf
/etc/fail2ban/action.d/npf.conf
/etc/fail2ban/action.d/nsupdate.conf
/etc/fail2ban/action.d/osx-afctl.conf
/etc/fail2ban/action.d/osx-ipfw.conf
/etc/fail2ban/action.d/pf.conf
/etc/fail2ban/action.d/route.conf
/etc/fail2ban/action.d/sendmail-buffered.conf
/etc/fail2ban/action.d/sendmail-common.conf
/etc/fail2ban/action.d/sendmail-geoip-lines.conf
/etc/fail2ban/action.d/sendmail-whois-ipjailmatches.conf
/etc/fail2ban/action.d/sendmail-whois-ipmatches.conf
/etc/fail2ban/action.d/sendmail-whois-lines.conf
/etc/fail2ban/action.d/sendmail-whois-matches.conf
/etc/fail2ban/action.d/sendmail-whois.conf
/etc/fail2ban/action.d/sendmail.conf
/etc/fail2ban/action.d/shorewall-ipset-proto6.conf
/etc/fail2ban/action.d/shorewall.conf
/etc/fail2ban/action.d/smtp.py
/etc/fail2ban/action.d/symbiosis-blacklist-allports.conf
/etc/fail2ban/action.d/ufw.conf
/etc/fail2ban/action.d/xarf-login-attack.conf
/etc/fail2ban/fail2ban.conf
/etc/fail2ban/fail2ban.d
/etc/fail2ban/filter.d
/etc/fail2ban/filter.d/3proxy.conf
/etc/fail2ban/filter.d/apache-auth.conf
/etc/fail2ban/filter.d/apache-badbots.conf
/etc/fail2ban/filter.d/apache-botsearch.conf
/etc/fail2ban/filter.d/apache-common.conf
/etc/fail2ban/filter.d/apache-fakegooglebot.conf
/etc/fail2ban/filter.d/apache-modsecurity.conf
/etc/fail2ban/filter.d/apache-nohome.conf
/etc/fail2ban/filter.d/apache-noscript.conf
/etc/fail2ban/filter.d/apache-overflows.conf
/etc/fail2ban/filter.d/apache-pass.conf
/etc/fail2ban/filter.d/apache-shellshock.conf
/etc/fail2ban/filter.d/assp.conf
/etc/fail2ban/filter.d/asterisk.conf
/etc/fail2ban/filter.d/bitwarden.conf
/etc/fail2ban/filter.d/botsearch-common.conf
/etc/fail2ban/filter.d/centreon.conf
/etc/fail2ban/filter.d/common.conf
/etc/fail2ban/filter.d/counter-strike.conf
/etc/fail2ban/filter.d/courier-auth.conf
/etc/fail2ban/filter.d/courier-smtp.conf
/etc/fail2ban/filter.d/cyrus-imap.conf
/etc/fail2ban/filter.d/directadmin.conf
/etc/fail2ban/filter.d/domino-smtp.conf
/etc/fail2ban/filter.d/dovecot.conf
/etc/fail2ban/filter.d/dropbear.conf
/etc/fail2ban/filter.d/drupal-auth.conf
/etc/fail2ban/filter.d/ejabberd-auth.conf
/etc/fail2ban/filter.d/exim-common.conf
/etc/fail2ban/filter.d/exim-spam.conf
/etc/fail2ban/filter.d/exim.conf
/etc/fail2ban/filter.d/freeswitch.conf
/etc/fail2ban/filter.d/froxlor-auth.conf
/etc/fail2ban/filter.d/gitlab.conf
/etc/fail2ban/filter.d/grafana.conf
/etc/fail2ban/filter.d/groupoffice.conf
/etc/fail2ban/filter.d/gssftpd.conf
/etc/fail2ban/filter.d/guacamole.conf
/etc/fail2ban/filter.d/haproxy-http-auth.conf
/etc/fail2ban/filter.d/horde.conf
/etc/fail2ban/filter.d/ignorecommands
/etc/fail2ban/filter.d/ignorecommands/apache-fakegooglebot
/etc/fail2ban/filter.d/kerio.conf
/etc/fail2ban/filter.d/lighttpd-auth.conf
/etc/fail2ban/filter.d/mongodb-auth.conf
/etc/fail2ban/filter.d/monit.conf
/etc/fail2ban/filter.d/murmur.conf
/etc/fail2ban/filter.d/mysqld-auth.conf
/etc/fail2ban/filter.d/nagios.conf
/etc/fail2ban/filter.d/named-refused.conf
/etc/fail2ban/filter.d/nginx-botsearch.conf
/etc/fail2ban/filter.d/nginx-http-auth.conf
/etc/fail2ban/filter.d/nginx-limit-req.conf
/etc/fail2ban/filter.d/nsd.conf
/etc/fail2ban/filter.d/openhab.conf
/etc/fail2ban/filter.d/openwebmail.conf
/etc/fail2ban/filter.d/oracleims.conf
/etc/fail2ban/filter.d/pam-generic.conf
/etc/fail2ban/filter.d/perdition.conf
/etc/fail2ban/filter.d/php-url-fopen.conf
/etc/fail2ban/filter.d/phpmyadmin-syslog.conf
/etc/fail2ban/filter.d/portsentry.conf
/etc/fail2ban/filter.d/postfix.conf
/etc/fail2ban/filter.d/proftpd.conf
/etc/fail2ban/filter.d/pure-ftpd.conf
/etc/fail2ban/filter.d/qmail.conf
/etc/fail2ban/filter.d/recidive.conf
/etc/fail2ban/filter.d/roundcube-auth.conf
/etc/fail2ban/filter.d/screensharingd.conf
/etc/fail2ban/filter.d/selinux-common.conf
/etc/fail2ban/filter.d/selinux-ssh.conf
/etc/fail2ban/filter.d/sendmail-auth.conf
/etc/fail2ban/filter.d/sendmail-reject.conf
/etc/fail2ban/filter.d/sieve.conf
/etc/fail2ban/filter.d/slapd.conf
/etc/fail2ban/filter.d/softethervpn.conf
/etc/fail2ban/filter.d/sogo-auth.conf
/etc/fail2ban/filter.d/solid-pop3d.conf
/etc/fail2ban/filter.d/squid.conf
/etc/fail2ban/filter.d/squirrelmail.conf
/etc/fail2ban/filter.d/sshd.conf
/etc/fail2ban/filter.d/stunnel.conf
/etc/fail2ban/filter.d/suhosin.conf
/etc/fail2ban/filter.d/tine20.conf
/etc/fail2ban/filter.d/traefik-auth.conf
/etc/fail2ban/filter.d/uwimap-auth.conf
/etc/fail2ban/filter.d/vsftpd.conf
/etc/fail2ban/filter.d/webmin-auth.conf
/etc/fail2ban/filter.d/wuftpd.conf
/etc/fail2ban/filter.d/xinetd-fail.conf
/etc/fail2ban/filter.d/znc-adminlog.conf
/etc/fail2ban/filter.d/zoneminder.conf
/etc/fail2ban/jail.conf
/etc/fail2ban/jail.d
/etc/fail2ban/jail.local
/etc/fail2ban/paths-common.conf
/etc/fail2ban/paths-opensuse.conf
/etc/logrotate.d/fail2ban
/run/fail2ban
/usr/bin/fail2ban-client
/usr/bin/fail2ban-python
/usr/bin/fail2ban-regex
/usr/bin/fail2ban-server
/usr/lib/python3.8/site-packages/fail2ban
/usr/lib/python3.8/site-packages/fail2ban-0.11.2-py3.8.egg-info
/usr/lib/python3.8/site-packages/fail2ban/__init__.py
/usr/lib/python3.8/site-packages/fail2ban/__pycache__
/usr/lib/python3.8/site-packages/fail2ban/__pycache__/__init__.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/__pycache__/exceptions.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/__pycache__/helpers.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/__pycache__/protocol.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/__pycache__/setup.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/__pycache__/version.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/client
/usr/lib/python3.8/site-packages/fail2ban/client/__init__.py
/usr/lib/python3.8/site-packages/fail2ban/client/__pycache__
/usr/lib/python3.8/site-packages/fail2ban/client/__pycache__/__init__.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/client/__pycache__/actionreader.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/client/__pycache__/beautifier.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/client/__pycache__/configparserinc.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/client/__pycache__/configreader.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/client/__pycache__/configurator.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/client/__pycache__/csocket.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/client/__pycache__/fail2banclient.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/client/__pycache__/fail2bancmdline.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/client/__pycache__/fail2banreader.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/client/__pycache__/fail2banregex.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/client/__pycache__/fail2banserver.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/client/__pycache__/filterreader.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/client/__pycache__/jailreader.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/client/__pycache__/jailsreader.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/client/actionreader.py
/usr/lib/python3.8/site-packages/fail2ban/client/beautifier.py
/usr/lib/python3.8/site-packages/fail2ban/client/configparserinc.py
/usr/lib/python3.8/site-packages/fail2ban/client/configreader.py
/usr/lib/python3.8/site-packages/fail2ban/client/configurator.py
/usr/lib/python3.8/site-packages/fail2ban/client/csocket.py
/usr/lib/python3.8/site-packages/fail2ban/client/fail2banclient.py
/usr/lib/python3.8/site-packages/fail2ban/client/fail2bancmdline.py
/usr/lib/python3.8/site-packages/fail2ban/client/fail2banreader.py
/usr/lib/python3.8/site-packages/fail2ban/client/fail2banregex.py
/usr/lib/python3.8/site-packages/fail2ban/client/fail2banserver.py
/usr/lib/python3.8/site-packages/fail2ban/client/filterreader.py
/usr/lib/python3.8/site-packages/fail2ban/client/jailreader.py
/usr/lib/python3.8/site-packages/fail2ban/client/jailsreader.py
/usr/lib/python3.8/site-packages/fail2ban/exceptions.py
/usr/lib/python3.8/site-packages/fail2ban/helpers.py
/usr/lib/python3.8/site-packages/fail2ban/protocol.py
/usr/lib/python3.8/site-packages/fail2ban/server
/usr/lib/python3.8/site-packages/fail2ban/server/__init__.py
/usr/lib/python3.8/site-packages/fail2ban/server/__pycache__
/usr/lib/python3.8/site-packages/fail2ban/server/__pycache__/__init__.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/server/__pycache__/action.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/server/__pycache__/actions.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/server/__pycache__/asyncserver.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/server/__pycache__/banmanager.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/server/__pycache__/database.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/server/__pycache__/datedetector.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/server/__pycache__/datetemplate.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/server/__pycache__/failmanager.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/server/__pycache__/failregex.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/server/__pycache__/filter.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/server/__pycache__/filtergamin.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/server/__pycache__/filterpoll.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/server/__pycache__/filterpyinotify.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/server/__pycache__/filtersystemd.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/server/__pycache__/ipdns.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/server/__pycache__/jail.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/server/__pycache__/jails.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/server/__pycache__/jailthread.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/server/__pycache__/mytime.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/server/__pycache__/observer.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/server/__pycache__/server.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/server/__pycache__/strptime.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/server/__pycache__/ticket.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/server/__pycache__/transmitter.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/server/__pycache__/utils.cpython-38.pyc
/usr/lib/python3.8/site-packages/fail2ban/server/action.py
/usr/lib/python3.8/site-packages/fail2ban/server/actions.py
/usr/lib/python3.8/site-packages/fail2ban/server/asyncserver.py
/usr/lib/python3.8/site-packages/fail2ban/server/banmanager.py
/usr/lib/python3.8/site-packages/fail2ban/server/database.py
/usr/lib/python3.8/site-packages/fail2ban/server/datedetector.py
/usr/lib/python3.8/site-packages/fail2ban/server/datetemplate.py
/usr/lib/python3.8/site-packages/fail2ban/server/failmanager.py
/usr/lib/python3.8/site-packages/fail2ban/server/failregex.py
/usr/lib/python3.8/site-packages/fail2ban/server/filter.py
/usr/lib/python3.8/site-packages/fail2ban/server/filtergamin.py
/usr/lib/python3.8/site-packages/fail2ban/server/filterpoll.py
/usr/lib/python3.8/site-packages/fail2ban/server/filterpyinotify.py
/usr/lib/python3.8/site-packages/fail2ban/server/filtersystemd.py
/usr/lib/python3.8/site-packages/fail2ban/server/ipdns.py
/usr/lib/python3.8/site-packages/fail2ban/server/jail.py
/usr/lib/python3.8/site-packages/fail2ban/server/jails.py
/usr/lib/python3.8/site-packages/fail2ban/server/jailthread.py
/usr/lib/python3.8/site-packages/fail2ban/server/mytime.py
/usr/lib/python3.8/site-packages/fail2ban/server/observer.py
/usr/lib/python3.8/site-packages/fail2ban/server/server.py
/usr/lib/python3.8/site-packages/fail2ban/server/strptime.py
/usr/lib/python3.8/site-packages/fail2ban/server/ticket.py
/usr/lib/python3.8/site-packages/fail2ban/server/transmitter.py
/usr/lib/python3.8/site-packages/fail2ban/server/utils.py
/usr/lib/python3.8/site-packages/fail2ban/setup.py
/usr/lib/python3.8/site-packages/fail2ban/version.py
/usr/lib/systemd/system/fail2ban.service
/usr/lib/tmpfiles.d/fail2ban.conf
/usr/sbin/rcfail2ban
/usr/share/doc/packages/fail2ban
/usr/share/doc/packages/fail2ban/ChangeLog
/usr/share/doc/packages/fail2ban/README.md
/usr/share/doc/packages/fail2ban/TODO
/usr/share/doc/packages/fail2ban/requirements.txt
/usr/share/doc/packages/fail2ban/run-rootless.txt
/usr/share/fillup-templates/sysconfig.fail2ban
/usr/share/licenses/fail2ban
/usr/share/licenses/fail2ban/COPYING
/usr/share/man/man1/fail2ban-client.1.gz
/usr/share/man/man1/fail2ban-python.1.gz
/usr/share/man/man1/fail2ban-regex.1.gz
/usr/share/man/man1/fail2ban-server.1.gz
/usr/share/man/man1/fail2ban-testcases.1.gz
/usr/share/man/man5/jail.conf.5.gz
/var/lib/fail2ban


Generated by rpm2html 1.8.1

Fabrice Bellet, Tue Nov 9 14:55:06 2021