2017-03-01 08:30:49 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Mar 1 08:15:47 UTC 2017 - joop.boonen@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Add a systemd journal tail so sshguard can parse this file
|
|
|
|
|
|
2016-12-31 14:23:03 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Dec 29 12:27:02 UTC 2016 - joop.boonen@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Build version 1.7.1
|
|
|
|
|
- Add sample Mac OS X 10.12 style launchd.plist
|
|
|
|
|
- Allow multiple forward slashes in process name
|
|
|
|
|
- Log released addresses only when debugging
|
|
|
|
|
- Process validation (``-f`` option) is deprecated
|
|
|
|
|
- Adjust TIMESTAMP_ISO8601 for Mac OS X 10.12
|
|
|
|
|
- Fix build error in hosts backend
|
|
|
|
|
- Fix empty functions in firewall scripts causing errors with Bash
|
|
|
|
|
- Flush stdout after every line in sshg-parser
|
|
|
|
|
- Add *sshg-logtail*
|
|
|
|
|
- Add *sshg-parser*
|
|
|
|
|
- Control firewall using *sshg-fw*
|
|
|
|
|
- Match "no matching key exchange method" for SSH
|
|
|
|
|
- Hosts backend is deprecated
|
|
|
|
|
- Logsuck (``-l`` option) is deprecated, use *sshg-logtail* instead
|
|
|
|
|
- Process validation (``-f`` option) is deprecated
|
|
|
|
|
- Remove external hooks (``-e`` option)
|
|
|
|
|
- Remove support for genfilt and ipfilter backends
|
|
|
|
|
- Accept socklog messages without a timestamp
|
|
|
|
|
- Fix excessive logging causing endless looping in logsuck
|
|
|
|
|
- Fix undefined assignment of initial inode number
|
|
|
|
|
- Match Postfix pre-authentication disconnects
|
|
|
|
|
- Fix bashisms in iptables backend
|
|
|
|
|
- Fix size argument in inet_ntop() call
|
|
|
|
|
- Remove excessive logging when polling from files
|
|
|
|
|
- Keep looking for unreadable files while polling
|
|
|
|
|
- Update Dovecot signature for POP3
|
|
|
|
|
- Match "Connection reset" message for SSH
|
|
|
|
|
- Resurrect PID file option by popular demand
|
|
|
|
|
- Adjust default abuse threshold
|
|
|
|
|
|
2016-02-19 13:21:37 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Feb 19 13:18:55 UTC 2016 - joop.boonen@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Added a corrected attack treshold value (40 default)
|
|
|
|
|
|
2016-02-19 12:44:37 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Feb 18 10:07:08 UTC 2016 - eshmarnev@suse.com
|
|
|
|
|
|
|
|
|
|
- Build version 1.6.3
|
|
|
|
|
- Disable blacklisting by default
|
|
|
|
|
- Implement logging as wrappers around syslog(2)
|
|
|
|
|
- Improve log and error messages
|
|
|
|
|
- Match sendmail authentication failures
|
|
|
|
|
- Remove PID file option
|
|
|
|
|
- Remove SIGTSTP and SIGCONT handler
|
|
|
|
|
- Remove reverse mapping attack signature
|
|
|
|
|
- Remove safe_fgets() and exit on interrupt
|
|
|
|
|
- Terminate state entries for hosts blocked with pf
|
|
|
|
|
- Update and shorten command-line usage
|
|
|
|
|
- Use 'configure' to set feature-test macros
|
|
|
|
|
- Updated patch file for new version of sshguard
|
|
|
|
|
|
2015-10-16 12:28:49 +00:00
|
|
|
-------------------------------------------------------------------
|
2016-01-11 15:17:11 +00:00
|
|
|
Mon Jan 11 15:14:38 UTC 2016 - joop.boonen@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Added ip6tables support handles via init and service files
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2015-10-16 12:28:49 +00:00
|
|
|
Fri Oct 16 12:15:24 UTC 2015 - joop.boonen@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Corrected a iptables error, that prevented sshguard
|
|
|
|
|
from functioning correctly
|
|
|
|
|
|
2015-10-15 13:54:10 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Oct 15 13:51:15 UTC 2015 - joop.boonen@opensuse.org
|
|
|
|
|
|
2015-10-15 13:54:54 +00:00
|
|
|
- Moved blacklist.db to /var/lib/sshguard/db/blacklist.db analog
|
2015-10-15 13:54:10 +00:00
|
|
|
most SUSE packages
|
|
|
|
|
|
2015-10-15 08:33:56 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Oct 15 07:52:48 UTC 2015 - joop.boonen@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Corrected the blacklist as it's auto generated
|
|
|
|
|
- Improved sysconfig
|
|
|
|
|
|
2015-09-29 13:58:11 +00:00
|
|
|
-------------------------------------------------------------------
|
2015-10-14 13:58:38 +00:00
|
|
|
Wed Oct 14 11:56:49 UTC 2015 - joop.boonen@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Build version 1.6.2
|
|
|
|
|
+ Make '-w' option backwards-compatible for iptables (James Harris)
|
|
|
|
|
+ Remove support for ip6fw and 'ipfw-range' option
|
|
|
|
|
+ Rewrite ipfw backend using command framework
|
|
|
|
|
- The white and black list now initially reside in files
|
|
|
|
|
/etc/sshguard/whitelist|blacklist
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2015-09-29 13:58:11 +00:00
|
|
|
Mon Sep 28 13:48:45 UTC 2015 - joop.boonen@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Build version 1.6.1
|
|
|
|
|
- Added sshguard-gcc5.patch so it also builds via gcc5
|
|
|
|
|
- Created a sshguard.service file so it'll run on systemd
|
|
|
|
|
systems
|
|
|
|
|
|
2013-03-27 14:01:53 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Mar 27 13:45:46 UTC 2013 - joop.boonen@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Reformated the spec file to the openSUSE standard
|
|
|
|
|
so it can be submitted to Factory
|
|
|
|
|
|
2011-04-08 18:34:56 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat Feb 19 11:42:03 UTC 2011 - lars@linux-schulserver.de
|
|
|
|
|
|
|
|
|
|
- update to 1.5:
|
|
|
|
|
+ logsucker: sshguard polls multiple log files at once
|
|
|
|
|
+ recognize syslog's "last message repeated N times" contextually
|
|
|
|
|
and per-source
|
|
|
|
|
+ attackers now gauged with attack *dangerousness* instead of
|
|
|
|
|
count (adjust your -a !)
|
|
|
|
|
+ improve IPv6 support
|
|
|
|
|
+ add detection for: Exim, vsftpd, Sendmail, Cucipop
|
|
|
|
|
+ improve logging granularity and descriptiveness
|
|
|
|
|
+ add -i command line option for saving PID file as an aid for
|
|
|
|
|
startup scripts
|
|
|
|
|
+ update some attack signatures
|
|
|
|
|
- cleanup specfile via spec-cleaner
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Dec 1 06:53:29 UTC 2010 - wr@rosenauer.org
|
|
|
|
|
|
|
|
|
|
- fix typo in macro
|
|
|
|
|
- revert a bit of cleanup to make it backwards compatible
|
|
|
|
|
(%_initddir)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Nov 2 12:30:46 UTC 2010 - prusnak@opensuse.org
|
|
|
|
|
|
|
|
|
|
- cleanup spec file
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Sep 29 13:13:03 CEST 2010 - wr@rosenauer.org
|
|
|
|
|
|
|
|
|
|
- update to version 1.5rc4
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sun Apr 4 20:43:08 CEST 2010 - wr@rosenauer.org
|
|
|
|
|
|
|
|
|
|
- update to version 1.5rc1
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Feb 11 14:54:46 CET 2010 - wr@rosenauer.org
|
|
|
|
|
|
|
|
|
|
- added init script and sysconfig
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Feb 10 10:33:49 CET 2010 - wr@rosenauer.org
|
|
|
|
|
|
|
|
|
|
- initial openSUSE package
|
|
|
|
|
|
