Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | apache: crack down on crawling of cgit.HEADmaster | Kaz Kylheku | 2024-08-30 | 1 | -2/+2 |
| | |||||
* | apache: don't ban clients trying to access icons. | Kaz Kylheku | 2024-08-30 | 1 | -1/+3 |
| | |||||
* | apache: modernize bad bot patterns. | Kaz Kylheku | 2024-08-30 | 1 | -2/+2 |
| | |||||
* | Use a variable for iptables command. | Kaz Kylheku | 2024-08-30 | 1 | -2/+3 |
| | |||||
* | expiry: bugfix: failing to delete unbanned clients. | Kaz Kylheku | 2020-04-11 | 1 | -3/+3 |
| | |||||
* | ssh: give a point to all intrusion events. | Kaz Kylheku | 2018-09-29 | 1 | -1/+1 |
| | |||||
* | Purge inactive clients from hash in do-expiry. | Kaz Kylheku | 2017-06-08 | 1 | -2/+4 |
| | |||||
* | Replace obsolete *self-path* with self-path. | Kaz Kylheku | 2017-04-05 | 1 | -1/+1 |
| | |||||
* | Implement *dry-run* variable for testing. | Kaz Kylheku | 2017-02-02 | 2 | -5/+10 |
| | |||||
* | Use @(include) rather than @(load) to suppress unbound warnings. | Kaz Kylheku | 2017-01-25 | 5 | -6/+6 |
| | |||||
* | Don't use @ on :string argument of @(next). | Kaz Kylheku | 2017-01-24 | 1 | -1/+1 |
| | | | | | This is an obsolete feature that isn't working in latest TXR. | ||||
* | Replace parallel hashes with one hash of client structs. | Kaz Kylheku | 2016-01-13 | 1 | -50/+57 |
| | |||||
* | Better pattern matches for logs of SMTP intrusions. | Kaz Kylheku | 2016-01-13 | 1 | -3/+3 |
| | |||||
* | Check for 206 and 302 HTTP errors. | Kaz Kylheku | 2015-07-27 | 1 | -1/+1 |
| | |||||
* | Use if/elif/else syntax. | Kaz Kylheku | 2014-06-25 | 1 | -7/+5 |
| | | | | | * apache.txr: Convert @(cases) with @(require) pattern to the equivalent if/elif/else syntactic sugar. | ||||
* | Summer 2014 update. | Kaz Kylheku | 2014-06-25 | 6 | -30/+136 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * apache.txr: restructuring of matching rules. Some new intruders listed. Now also checks HTTP response code to detect accesses to nonexistent pages. Bugfix: was not calling do-expiry. * txrban.txr: added code at top of @(do) to easily turn off daemonization and redirect logging to stdout for debugging. (*extrainfo*): New global hash. (report): New optional argument to pass extra info. (get-info): Function to retrieve the list of extra info for an IP address. (clear): New function to unban an IP and completely clear its access history. (ban): Use new sh function instead of open-command. Use new backquote operator ^ instead of '. (process-histories): When the recent access history is empty, delete it from *access-hist* rather than keeping an empty list there. Also delete the *extrainfo* when this happens. (do-expiry): Use unban function for unbanning. (unban): New function. * utils.txr (m): New pattern function for parsing month name. (self): New variable to hold the script's own name. (debug): Send output to *stdlog* instead of *stdout*, so that we now have syslog logging. * exim.txr: New file. * ssh.txr: New file. * startup.sh: New file. | ||||
* | Implemented point system for banning with timeout scale based on | Kaz Kylheku | 2013-11-30 | 4 | -36/+91 |
| | | | | | | severity. Implemented banning based on excessive activity. Utility functions split off into utils.txr. | ||||
* | Tracking this stuff. | Kaz Kylheku | 2013-11-29 | 3 | -0/+70 |