ver. 0.9.5 (2016/07/15) - old-not-obsolete
0.9.x line is no longer heavily developed. If you are interested in
new features (e.g. IPv6 support), please consider 0.10 branch and its
releases.
Fixes
filter.d/monit.conf- Extended failregex with new monit "access denied" version (gh-1355)
- failregex of previous monit version merged as single expression
filter.d/postfix.conf,filter.d/postfix-sasl.conf- Extended failregex daemon part, matching also
postfix/smtps/smtpd
now (gh-1391)
- Extended failregex daemon part, matching also
- Fixed a grave bug within tags substitutions because of incorrect
detection of recursion in case of multiple inline substitutions
of the same tag (affected actions:bsd-ipfw, etc). Now tracks
the actual list of the already substituted tags (per tag instead
of single list) filter.d/common.confgentoo-initdfixed--pidfilebug:--pidfileis option of
start-stop-daemon, not argument of fail2ban (see gh-1434)filter.d/asterisk.conf
New Features
- New Actions:
action.d/firewallcmd-rich-rulesandaction.d/firewallcmd-rich-logging
(gh-1367)
- New filters:
- slapd - ban hosts, that were failed to connect with invalid
credentials: error code 49 (gh-1478)
- slapd - ban hosts, that were failed to connect with invalid
Enhancements
- Extreme speedup of all sqlite database operations (gh-1436),
by using of following sqlite options:- (synchronous = OFF) write data through OS without syncing
- (journal_mode = MEMORY) use memory for the transaction logging
- (temp_store = MEMORY) temporary tables and indices are kept in memory
- journald journalmatch for pure-ftpd (gh-1362)
- Added additional regex filter for dovecot ldap authentication failures (gh-1370)
filter.d/exim*conf- Added additional regexes (gh-1371)
- Made port entry optional