08.2
12

Fail2ban 0.8.7 release

by admin ·

Recall that fail2ban is a daemon that scans the user-defined log-files and automatically adds the rule to iptables for triggering the defined filters. For example, you can specify a rule that after 2 failed attempts to log on smtp, IP-address of the remote side will be blocked for a certain number of minutes.

New functionality:

  • Added filter / jail for lighttpd-auth.
  • pyinotify as a backend.
  • usedns-parameter for the jails, are not to use DNS.
  • ‘Recidive’ Filter / jail to monitor file fail2ban.conf, which allows attackers to block repetitive.
  • Added support for asterisk.
  • Fail2ban is not possible to run as root.


Corrections:

  • Fixed Gentoo init-script.
  • In addBannedIP added enough rules to trigger the ban, not just a failed attempt.
  • Field «ip» forcibly returned as a str, not unicode, to save the log in the non-unicode.
  • Allowed trailing white-spaces in the lighttpd-auth.conf.
  • Allowed trailing white-spaces in some regex in sshd.conf.

Tags: ,

Leave a Reply