summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* apache: crack down on crawling of cgit.HEADmasterKaz Kylheku2024-08-301-2/+2
|
* apache: don't ban clients trying to access icons.Kaz Kylheku2024-08-301-1/+3
|
* apache: modernize bad bot patterns.Kaz Kylheku2024-08-301-2/+2
|
* Use a variable for iptables command.Kaz Kylheku2024-08-301-2/+3
|
* expiry: bugfix: failing to delete unbanned clients.Kaz Kylheku2020-04-111-3/+3
|
* ssh: give a point to all intrusion events.Kaz Kylheku2018-09-291-1/+1
|
* Purge inactive clients from hash in do-expiry.Kaz Kylheku2017-06-081-2/+4
|
* Replace obsolete *self-path* with self-path.Kaz Kylheku2017-04-051-1/+1
|
* Implement *dry-run* variable for testing.Kaz Kylheku2017-02-022-5/+10
|
* Use @(include) rather than @(load) to suppress unbound warnings.Kaz Kylheku2017-01-255-6/+6
|
* Don't use @ on :string argument of @(next).Kaz Kylheku2017-01-241-1/+1
| | | | | This is an obsolete feature that isn't working in latest TXR.
* Replace parallel hashes with one hash of client structs.Kaz Kylheku2016-01-131-50/+57
|
* Better pattern matches for logs of SMTP intrusions.Kaz Kylheku2016-01-131-3/+3
|
* Check for 206 and 302 HTTP errors.Kaz Kylheku2015-07-271-1/+1
|
* Use if/elif/else syntax.Kaz Kylheku2014-06-251-7/+5
| | | | | * apache.txr: Convert @(cases) with @(require) pattern to the equivalent if/elif/else syntactic sugar.
* Summer 2014 update.Kaz Kylheku2014-06-256-30/+136
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * apache.txr: restructuring of matching rules. Some new intruders listed. Now also checks HTTP response code to detect accesses to nonexistent pages. Bugfix: was not calling do-expiry. * txrban.txr: added code at top of @(do) to easily turn off daemonization and redirect logging to stdout for debugging. (*extrainfo*): New global hash. (report): New optional argument to pass extra info. (get-info): Function to retrieve the list of extra info for an IP address. (clear): New function to unban an IP and completely clear its access history. (ban): Use new sh function instead of open-command. Use new backquote operator ^ instead of '. (process-histories): When the recent access history is empty, delete it from *access-hist* rather than keeping an empty list there. Also delete the *extrainfo* when this happens. (do-expiry): Use unban function for unbanning. (unban): New function. * utils.txr (m): New pattern function for parsing month name. (self): New variable to hold the script's own name. (debug): Send output to *stdlog* instead of *stdout*, so that we now have syslog logging. * exim.txr: New file. * ssh.txr: New file. * startup.sh: New file.
* Implemented point system for banning with timeout scale based onKaz Kylheku2013-11-304-36/+91
| | | | | | severity. Implemented banning based on excessive activity. Utility functions split off into utils.txr.
* Tracking this stuff.Kaz Kylheku2013-11-293-0/+70