Commit Graph

  • e32017573c archive repository master Robert Dower 2025-08-07 14:08:12 -07:00
  • 03f4d64ff6 Convert to pandoc. Auke Kok 2020-04-01 12:47:52 -07:00
  • 865ec916aa v21 v21 Auke Kok 2020-02-13 10:59:58 -08:00
  • 6746c4a4db v20 v20 Auke Kok 2020-02-13 10:41:54 -08:00
  • 7b700cf2a2 Add tallow.patterns man page puneetse 2020-02-11 20:52:31 -08:00
  • 3ffb46e8e7 Add extra path for firewall-cmd Thorsten Kukuk 2019-11-28 13:24:14 +01:00
  • 4b071b01f6 Need configure in this workflow. Auke Kok 2019-11-06 11:37:06 -08:00
  • 4212f1dbef Fix dependency. Auke Kok 2019-11-06 11:35:22 -08:00
  • 9260e519f5 Add github workflow integration. Auke Kok 2019-11-06 11:32:41 -08:00
  • 5dfb9821e3 v19 v19 Auke Kok 2019-11-04 14:18:38 -08:00
  • 348fd7d744 Fixed signedness. Auke Kok 2019-11-04 14:12:37 -08:00
  • 83201e8b32 v18 v18 Auke Kok 2019-10-28 14:27:31 -07:00
  • 32fc0ecdaa Hide unwanted firewalld-cmd error messages. Auke Kok 2019-10-28 14:27:02 -07:00
  • 79f89d8b79 v17 v17 Auke Kok 2019-10-22 13:39:34 -07:00
  • ab57cc5dd7 Add firewalld support puneetse 2019-09-20 16:55:39 -07:00
  • 96fa692bf6 Fix command order in tallow.conf man page puneetse 2019-09-20 16:50:10 -07:00
  • 71e0fc6cca Add json-c to travis. Auke Kok 2019-10-03 14:04:18 -07:00
  • 31205d7f16 make older compilers a bit happier Boris Manojlovic 2019-06-06 19:37:21 +02:00
  • 43998632aa add dovecot as postfix auth backend parsing Boris Manojlovic 2019-04-08 23:28:14 +02:00
  • e4b3977704 Ensure we don't replay old events. Auke Kok 2019-04-25 13:23:03 -07:00
  • feee1a2556 Add example whitelist defaults. Auke Kok 2019-04-19 14:36:46 -07:00
  • 35182b8447 Force insert iptables rules as rule #1. Auke Kok 2019-02-19 09:46:45 -08:00
  • d29132144c Debug: print path to skipped file, not the other one. Auke Kok 2019-02-19 09:44:44 -08:00
  • 0a0a912c70 Move src files to /src/. Auke Kok 2019-01-23 15:55:45 -08:00
  • 6545cb0d33 Move man pages to /man/ folder. Auke Kok 2019-01-23 15:51:23 -08:00
  • fdaa8ed34c v16 v16 Auke Kok 2019-01-23 15:19:50 -08:00
  • ea34b5b78c Return memory to the OS on prune. Auke Kok 2019-01-23 15:17:14 -08:00
  • 33191b04bf Run as nice by default. Auke Kok 2019-01-23 15:14:46 -08:00
  • 9174590b04 Convert patterns to JSON input files. v15 Auke Kok 2019-01-23 11:17:27 -08:00
  • 14152b1dad Re-create docs. v14 Auke Kok 2018-10-04 11:35:59 -07:00
  • e2f92ff75b Add 10. and 192.168. as default whitelist entries to tallow. Auke Kok 2018-10-04 11:28:58 -07:00
  • 4ff1206974 Tune down badness for attempts a small bit. Auke Kok 2018-10-04 11:23:09 -07:00
  • 8c836013cd Merge pull request #8 from puneetse/master ahkok 2018-10-04 11:30:39 -07:00
  • 78dfe59099 Add 10. and 192.168. as default whitelist entries to tallow. v13 Auke Kok 2018-10-04 11:28:58 -07:00
  • dccbfce478 Tune down badness for attempts a small bit. v12 Auke Kok 2018-10-04 11:23:09 -07:00
  • a6fb19ff4f Minor typo on tallow.conf man page puneetse 2018-06-25 16:27:25 -07:00
  • 5503ff0b20 Possibly handle journald restarts better. v11 untagged-b3f44d644b7903f8fa67 Auke Kok 2018-06-25 12:11:09 -07:00
  • 8655223248 Remove HUP/TERM/INT sighandler, shield USR1 sighandler. v10 Auke Kok 2018-03-28 09:44:06 -07:00
  • 76a59df0f1 Fine-tune blocking rules one notch down. v9 Auke Kok 2018-03-23 16:17:34 -07:00
  • 36946deeee v8 v8 Auke Kok 2018-02-05 11:11:17 -08:00
  • d51577bd4f Add one more preauth disconnect pattern. Auke Kok 2018-02-05 11:02:59 -08:00
  • e15bfe4dc0 Document USR1, update man page output. Auke Kok 2018-01-19 10:25:20 -08:00
  • d6e53e6f3a Rename to proper extension. Auke Kok 2018-01-19 09:39:50 -08:00
  • a2a6d8e9ac v7. v7 Auke Kok 2018-01-10 10:29:53 -08:00
  • c5569176d2 Allow whitelist patterns. Auke Kok 2018-01-08 16:06:26 -08:00
  • bf81c259b0 Add 'nocreate' option to bypass all rule/set creation. Auke Kok 2018-01-05 10:01:35 -08:00
  • ff2a47756f v6 v6 Auke Kok 2017-12-14 14:52:35 -08:00
  • b18f636489 Assure blocked IP's expire before they can be detected again. Auke Kok 2017-12-14 14:31:41 -08:00
  • 6e0251d3dc Update manual pages to indicate the various recent changes. Auke Kok 2017-12-14 10:00:44 -08:00
  • 60a90adbc5 Instant throttling of confirmed abuse. Auke Kok 2017-12-14 09:57:52 -08:00
  • 1f43bcbf12 Debug code for pruning. Auke Kok 2017-12-13 15:02:13 -08:00
  • 8da71a2184 Remove multiple block spam. Auke Kok 2017-12-12 13:19:46 -08:00
  • 38b09c3b07 Re-add debug printout of state, move various prints to debug build. Auke Kok 2017-12-11 16:47:59 -08:00
  • 20f4c970de Add 6 more relevant SSHD patterns. Auke Kok 2017-12-11 16:45:56 -08:00
  • 32c20f190f Allow multiple patterns. Auke Kok 2017-12-11 13:59:00 -08:00
  • e3e4388654 Replace path_iptables with ipt_path in sample tallow.conf Gwenn Gueguen 2017-05-22 11:42:09 +02:00
  • 8a05303802 v5 v5 Auke Kok 2017-05-17 17:18:01 -07:00
  • e296f501c7 Use pcre to match logs, and find IP addresses. Auke Kok 2017-05-16 15:55:18 -07:00
  • 379f74a071 Fix Travis. Auke Kok 2017-05-07 00:36:20 -07:00
  • 9042a01eab v4 v4 Auke Kok 2017-05-11 08:56:56 -07:00
  • 2225ee029d Revert "also catch port probers that try ssl level evils" Auke Kok 2017-05-10 21:49:16 -07:00
  • dee23b8275 Lazy initialization. Auke Kok 2017-05-10 21:14:07 -07:00
  • 34bd8d55bd Remove SIGUSR1 handler - dumping lists is obsolete with ipset. Auke Kok 2017-05-10 21:07:18 -07:00
  • 2a33768293 Don't break our LL on block. Auke Kok 2017-05-10 20:59:36 -07:00
  • ea958fd2b5 v3 v3 Auke Kok 2017-05-08 08:49:15 -07:00
  • 4547892d56 Attempt to build against old systemd versions as well. Auke Kok 2017-05-07 21:09:58 -07:00
  • c661a20e33 Revert removal of prune(). Auke Kok 2017-05-07 20:36:32 -07:00
  • 9f37520c72 ip can be NULL (output of strtok) Arjan van de Ven 2017-05-07 22:16:44 +00:00
  • dc8f37e41f also catch port probers that try ssl level evils Arjan van de Ven 2017-05-07 22:24:40 +00:00
  • d590c8f67f v2: ipset release. v2 Auke Kok 2017-05-07 00:17:08 -07:00
  • ec2b5cbfc0 Make ipset init clean and working. Auke Kok 2017-05-07 00:05:25 -07:00
  • cb41c16e93 Minor ipset fixes. Auke Kok 2017-05-06 23:38:28 -07:00
  • 40568eb4cd Man pages and checked out folders. Auke Kok 2017-05-06 23:14:06 -07:00
  • 992927798d Convert to ipset. Auke Kok 2017-05-06 22:30:50 -07:00
  • fba8921952 add to .gitignore Arjan van de Ven 2017-05-07 05:28:37 +00:00
  • 73e9cd7011 add travis support Arjan van de Ven 2017-05-07 05:28:11 +00:00
  • a4d9d9688e add -W Arjan van de Ven 2017-05-07 05:26:33 +00:00
  • 35eeabb146 avoid a large .data section by just initializing the big structures at run time Arjan van de Ven 2017-05-07 05:25:13 +00:00
  • 08d45d39fd Convert man page to ronn generated .md input format. Auke Kok 2017-05-06 22:12:30 -07:00
  • cd65e1c48a v1 v1 Auke Kok 2017-05-06 21:34:24 -07:00
  • 47d7bf1d1f Link against libsystemd instead. Auke Kok 2017-03-25 13:00:03 -07:00
  • b81b440495 Err, usec timeout value. Auke Kok 2015-06-21 15:26:56 -07:00
  • afe1a2663b Fixes: Make tailing the journal way more robust. Auke Kok 2015-06-21 13:18:04 -07:00
  • dee31e8fc2 Clean up array properly. Auke Kok 2015-06-20 20:24:11 -07:00
  • 54adb2f684 Print a msg if ipv6 is disabled. Auke Kok 2015-03-21 14:56:09 -07:00
  • cbcb62c206 Add ipv6 support. Auke Kok 2015-03-21 14:27:10 -07:00
  • c6343259ce Overdue fixes I've had running for a while. Auke Kok 2015-03-20 20:42:01 -07:00
  • 94f4e191fb Fix journal forward issue, add dump option. Auke Kok 2013-08-20 10:44:41 -07:00
  • 4f59e7feca Migrate normal output to stdout. Auke Kok 2012-11-05 11:10:33 -08:00
  • e3914f7db0 Bugfix: bad option placement. Auke Kok 2012-11-04 23:28:05 -08:00
  • dcbd79e477 Fix IP address check. Fix unblock calling iptables when not needed. Auke Kok 2012-11-02 18:00:56 -07:00
  • f1a8249cea Install config example in /usr/share/doc. Auke Kok 2012-10-31 14:45:07 -07:00
  • d60d4f1a33 Make sure we don't pass garbage to system(). Auke Kok 2012-10-31 14:18:37 -07:00
  • 67c92dbbc7 Config file -done- Auke Kok 2012-10-31 14:08:35 -07:00
  • 6b0d8a63e0 Install man pages. Auke Kok 2012-10-31 14:08:14 -07:00
  • d281f6a8b9 Fix reference to the journal. Auke Kok 2012-10-31 12:14:45 -07:00
  • 7a80b95403 Adding 2 basic man pages. Auke Kok 2012-10-31 12:13:35 -07:00
  • 7022cf147a Example config file. Auke Kok 2012-10-29 16:43:35 -07:00
  • d55b027206 Make tallow parse /etc/tallow.conf for non-default configuration. Auke Kok 2012-10-29 16:41:02 -07:00
  • 94bd6f5049 Adding limits.h to the checklist. Auke Kok 2012-10-29 16:38:00 -07:00