File sshguard.changes of Package sshguard
-------------------------------------------------------------------
Thu Nov 23 13:44:30 UTC 2017 - rbrown@suse.com
- Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468)
-------------------------------------------------------------------
Wed Mar 1 08:15:47 UTC 2017 - joop.boonen@opensuse.org
- Add a systemd journal tail so sshguard can parse this file
-------------------------------------------------------------------
Thu Dec 29 12:27:02 UTC 2016 - joop.boonen@opensuse.org
- Build version 1.7.1
- Add sample Mac OS X 10.12 style launchd.plist
- Allow multiple forward slashes in process name
- Log released addresses only when debugging
- Process validation (``-f`` option) is deprecated
- Adjust TIMESTAMP_ISO8601 for Mac OS X 10.12
- Fix build error in hosts backend
- Fix empty functions in firewall scripts causing errors with Bash
- Flush stdout after every line in sshg-parser
- Add *sshg-logtail*
- Add *sshg-parser*
- Control firewall using *sshg-fw*
- Match "no matching key exchange method" for SSH
- Hosts backend is deprecated
- Logsuck (``-l`` option) is deprecated, use *sshg-logtail* instead
- Process validation (``-f`` option) is deprecated
- Remove external hooks (``-e`` option)
- Remove support for genfilt and ipfilter backends
- Accept socklog messages without a timestamp
- Fix excessive logging causing endless looping in logsuck
- Fix undefined assignment of initial inode number
- Match Postfix pre-authentication disconnects
- Fix bashisms in iptables backend
- Fix size argument in inet_ntop() call
- Remove excessive logging when polling from files
- Keep looking for unreadable files while polling
- Update Dovecot signature for POP3
- Match "Connection reset" message for SSH
- Resurrect PID file option by popular demand
- Adjust default abuse threshold
-------------------------------------------------------------------
Fri Feb 19 13:18:55 UTC 2016 - joop.boonen@opensuse.org
- Added a corrected attack treshold value (40 default)
-------------------------------------------------------------------
Thu Feb 18 10:07:08 UTC 2016 - eshmarnev@suse.com
- Build version 1.6.3
- Disable blacklisting by default
- Implement logging as wrappers around syslog(2)
- Improve log and error messages
- Match sendmail authentication failures
- Remove PID file option
- Remove SIGTSTP and SIGCONT handler
- Remove reverse mapping attack signature
- Remove safe_fgets() and exit on interrupt
- Terminate state entries for hosts blocked with pf
- Update and shorten command-line usage
- Use 'configure' to set feature-test macros
- Updated patch file for new version of sshguard
-------------------------------------------------------------------
Mon Jan 11 15:14:38 UTC 2016 - joop.boonen@opensuse.org
- Added ip6tables support handles via init and service files
-------------------------------------------------------------------
Fri Oct 16 12:15:24 UTC 2015 - joop.boonen@opensuse.org
- Corrected a iptables error, that prevented sshguard
from functioning correctly
-------------------------------------------------------------------
Thu Oct 15 13:51:15 UTC 2015 - joop.boonen@opensuse.org
- Moved blacklist.db to /var/lib/sshguard/db/blacklist.db analog
most SUSE packages
-------------------------------------------------------------------
Thu Oct 15 07:52:48 UTC 2015 - joop.boonen@opensuse.org
- Corrected the blacklist as it's auto generated
- Improved sysconfig
-------------------------------------------------------------------
Wed Oct 14 11:56:49 UTC 2015 - joop.boonen@opensuse.org
- Build version 1.6.2
+ Make '-w' option backwards-compatible for iptables (James Harris)
+ Remove support for ip6fw and 'ipfw-range' option
+ Rewrite ipfw backend using command framework
- The white and black list now initially reside in files
/etc/sshguard/whitelist|blacklist
-------------------------------------------------------------------
Mon Sep 28 13:48:45 UTC 2015 - joop.boonen@opensuse.org
- Build version 1.6.1
- Added sshguard-gcc5.patch so it also builds via gcc5
- Created a sshguard.service file so it'll run on systemd
systems
-------------------------------------------------------------------
Wed Mar 27 13:45:46 UTC 2013 - joop.boonen@opensuse.org
- Reformated the spec file to the openSUSE standard
so it can be submitted to Factory
-------------------------------------------------------------------
Sat Feb 19 11:42:03 UTC 2011 - lars@linux-schulserver.de
- update to 1.5:
+ logsucker: sshguard polls multiple log files at once
+ recognize syslog's "last message repeated N times" contextually
and per-source
+ attackers now gauged with attack *dangerousness* instead of
count (adjust your -a !)
+ improve IPv6 support
+ add detection for: Exim, vsftpd, Sendmail, Cucipop
+ improve logging granularity and descriptiveness
+ add -i command line option for saving PID file as an aid for
startup scripts
+ update some attack signatures
- cleanup specfile via spec-cleaner
-------------------------------------------------------------------
Wed Dec 1 06:53:29 UTC 2010 - wr@rosenauer.org
- fix typo in macro
- revert a bit of cleanup to make it backwards compatible
(%_initddir)
-------------------------------------------------------------------
Tue Nov 2 12:30:46 UTC 2010 - prusnak@opensuse.org
- cleanup spec file
-------------------------------------------------------------------
Wed Sep 29 13:13:03 CEST 2010 - wr@rosenauer.org
- update to version 1.5rc4
-------------------------------------------------------------------
Sun Apr 4 20:43:08 CEST 2010 - wr@rosenauer.org
- update to version 1.5rc1
-------------------------------------------------------------------
Thu Feb 11 14:54:46 CET 2010 - wr@rosenauer.org
- added init script and sysconfig
-------------------------------------------------------------------
Wed Feb 10 10:33:49 CET 2010 - wr@rosenauer.org
- initial openSUSE package
