jail.conf
: don't specify action
directly in jails (use action_
or banaction
instead)action = %(action_mw)s
should be specified
per jail or in default section in jail.local), closes gh-2357actname
is not set but name deviates from standard name, gh-2686)%(banaction)s
interpolation because it can be complex value (containing [...]
and/or quotes),
so would bother the action interpolationaction.d/*-ipset*.conf
: several ipset actions fixed (no timeout per default anymore), so no discrepancy
between ipset and fail2ban (removal from ipset will be managed by fail2ban only, gh-2703)action.d/cloudflare.conf
: fixed actionunban
(considering new-line chars and optionally real json-parsing
with jq
, gh-2140, gh-2656)action.d/nftables.conf
(type=multiport only): fixed port range selector, replacing :
with -
(gh-2763)action.d/firewallcmd-*.conf
(multiport only): fixed port range selector, replacing :
with -
(gh-2821)action.d/bsd-ipfw.conf
: fixed selection of rule-no by large list or initial lowest_rule_num
(gh-2836)filter.d/common.conf
: avoid substitute of default values in related lt_*
section, __prefix_line
should be interpolated in definition section (inside the filter-config, gh-2650)filter.d/dovecot.conf
: filter.d/courier-smtp.conf
: prefregex extended to consider port in log-message (gh-2697)filter.d/traefik-auth.conf
: filter extended with parameter mode (normal
, ddos
, aggressive
) to handle
the match of username differently (gh-2693):normal
: matches 401 with supplied username onlyddos
: matches 401 without supplied username onlyaggressive
: matches 401 and any variant (with and without username)filter.d/sshd.conf
: normalizing of user pattern in all RE's, allowing empty user (gh-2749)datepattern
(e. g. set from filter) - pattern : descriptionaction = a b
would specify 2 actions a
and b
filter.d/guacamole.conf
extended with logging
parameter to follow webapp-logging if it's configured (gh-2631)filter.d/bitwarden.conf
enhanced to support syslog (gh-2778){UNB}
for datepattern
to disable word boundaries in regex;(^...)
;findtime
);{NONE}
- allow to find failures totally without date-time in log messages,
whereas filter will use now as timestamp (gh-2802)datepattern
(better search algorithm in datedetector, especially for single template);<F-TUPLE_
, that would combine value of <F-V>
with all value of <F-TUPLE_V?_n?>
tags (gh-2755)Please login to add feedback.
This update has been submitted for testing by hobbes1069.
This update's test gating status has been changed to 'ignored'.
This update's test gating status has been changed to 'waiting'.
This update's test gating status has been changed to 'ignored'.
This update has been pushed to testing.
This update can be pushed to stable now if the maintainer wishes
This update has been submitted for stable by hobbes1069.
This update has been pushed to stable.