-
Notifications
You must be signed in to change notification settings - Fork 1
/
ChangeLog
135 lines (105 loc) · 3.82 KB
/
ChangeLog
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
# Change Log
All notable changes to this project will be documented in this file.
The format is based on [Keep a Changelog](http://keepachangelog.com/)
and this project adheres to [Semantic Versioning](http://semver.org/).
## Unreleased
## [0.6] - 2023-02-07
### Added
* add 'log level <level>' command
* add 'log events' command
* support for libipset > 7.X
* readline support in f2bc
* add log rotation to debian package
* new options for daemon -- "coredumps" && "nice"
* allow jails without filter
* replace simple "match count" with advanced "scored matches"
* add source/filter match tags in stats
* show daemon uptime in status
### Changed
* filters collection now in separate repository
* change modules naming & location
* change 'rotate' command to 'log rotate' for consistency
* client and control socket fully refactored to use plain tcp
* allow redis source/backend fail on start (no network yet)
* filter-test now uses config instead direct library load
* match count now not limited to last 5
* jail's "maxcount" parameter replaced with "maxscore" (need config fix)
* if missing password for control socket in config it will be set random (and send to logfile)
* build system now relies on pkg-config instead cmake modules
### Removed
* multicast source/backend (replaced with f2bcd)
### Fixed
* don't hard depend on mountall
* fix setting jail 'state' param
* SO_PEERCRED is linux-specific now
## [0.5] - 2017-01-19
### Added
+ added 'fatal' log facility
+ added empty filter for use with sources that providing bare ip address
+ added doxygen comments to all sources
+ added some documentation: see docs/install.md and docs/configuration.md
+ added ability to save and restore banned addresses on reload/restart
+ added 'portknock' source
+ added 'mcast' source/backend (not well tested yet)
+ added handler for 'jail <name> set' command
+ added interactive mode for backend test
### Changed
* refactoring of f2b_cmsg_*(), f2b_csocket_*()
### Fixed
* better error handling in 'redis' source & backend
* fix freopen() calls: std{in,out,err} may be read-only
* fix setting uid/git & daemon options
* fix compatibility with old pcre (< 8.20) in filter/pcre
* fixed f2b-backend-test cmdline parse
* fix setting uid/git & daemon options
* fix errcb in 'redis' source
* fix SIGUSR1 handler
## [0.4] - 2016-10-07
### Added
* make source(s) also a module. now available:
* files source
* redis source
* f2b-source-test utility
* SIGUSR1 handler for logfile reopening
* timeout in client
* filters/nginx-bots.pcre
### Changed
* f2b-filter-test now show per-pattern match stats
* install short readme file in conf-enabled dir
* tested & fixed redis backend
* f2b-backend-test : simplify usage
* chg jail commands 'show', 'ban' & 'release' : add expicit 'ip' prefix
* rename commands: regex stats -> filter stats, regex add -> filter reload
### Fixed
* inversion of 'shared' option for 'exec' backend
* correctly write pidfile
* bans with maxretry = 1
* redis detection in cmake
* double free in filter's flush()
## [0.3] - 2016-09-12
### Added
* "jail <jail> regex stats" command
* "jail <jail> regex add" command
* apply CMAKE_INSTALL_PREFIX to configs
* added config for exec backend for ipfw
* redis backend (experimental)
* added config reload
* log file rotation
### Changed
* enable 'icase' for filters by default
* enable 'sharing' for backends by default
* tune configs location
* enable hardening in build opts by default
* fix ssh filter patterns
* use strl*() instead snprintf()/strncpy() in backends
* rename tests utils
* print date/time in log file
* disable buffering for logfile
* add stats() funtion to filter's api
### Fixed
* fix segfault in preg filter
* fix cppcheck warnings
* fix bsd build
* fix termination of daemon
## [0.2] - 2016-08-21
* Initial public release