Changelog for sshguard-2.1.0-35.1.x86_64.rpm :
Tue Jan 30 13:00:00 2018 joop.boonenAATTopensuse.org
- Build version 2.1.0
- Add nftables backend
- Add monitoring support for new service: Cockpit, Linux server dashboard
- Match \"maximum authentication attempts\" for SSH
- Match Debian-style \"Failed password for invalid user\" for SSH
- Add monitoring support for new service: Common webserver probes, in Common Log Format
- Match \'Disconnecting invalid user\' for SSH
- Add monitoring support for new service: WordPress, in Common Log Format
- Add monitoring support for new service: SSHGuard
- Firewall backends now support blocking subnets.
- Add new IPV6_SUBNET and IPV4_SUBNET configuration options. Defaults to traditional single-address blocking.
- Log whitelist matches with higher priority
- Match port number in \"invalid user\" attack
- FirewallD backend reloads firewall configuration less often.
- In version 2.0.0
- Add
*
*firewalld
*
* backend
- Add
*
*ipset
*
* backend
- Annotate logs using
*
*-a
*
* flag to
*
*sshg-parser
*
*
- Match \"no matching cipher\" for SSH
- Preliminary support for Capsicum and pledge()
- Resurrect
*
*ipfilter
*
* backend
- Support reading from os_log on macOS 10.12 and systemd journal
- Add warning when reading from standard input
- Build and install all backends by default
- Improve log messages and tweak logging priorities
- Runtime flags now configurable in the configuration file
- SSHGuard
*requires
* a configuration file to start
- Remove process validation (
*
*-f
*
* option)
- Fix
*
*ipfw
*
* backend on FreeBSD 11
- Fix initial block time
- Update Dovecot pattern for macOS
- Use standard score for Sendmail auth attack
- sshguard-gcc5.patch isn\'t needed any more

Thu Nov 23 13:00:00 2017 rbrownAATTsuse.com
- Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468)

Wed Mar 1 13:00:00 2017 joop.boonenAATTopensuse.org
- Add a systemd journal tail so sshguard can parse this file

Thu Dec 29 13:00:00 2016 joop.boonenAATTopensuse.org
- Build version 1.7.1
- Add sample Mac OS X 10.12 style launchd.plist
- Allow multiple forward slashes in process name
- Log released addresses only when debugging
- Process validation (``-f`` option) is deprecated
- Adjust TIMESTAMP_ISO8601 for Mac OS X 10.12
- Fix build error in hosts backend
- Fix empty functions in firewall scripts causing errors with Bash
- Flush stdout after every line in sshg-parser
- Add
*sshg-logtail
*
- Add
*sshg-parser
*
- Control firewall using
*sshg-fw
*
- Match \"no matching key exchange method\" for SSH
- Hosts backend is deprecated
- Logsuck (``-l`` option) is deprecated, use
*sshg-logtail
* instead
- Process validation (``-f`` option) is deprecated
- Remove external hooks (``-e`` option)
- Remove support for genfilt and ipfilter backends
- Accept socklog messages without a timestamp
- Fix excessive logging causing endless looping in logsuck
- Fix undefined assignment of initial inode number
- Match Postfix pre-authentication disconnects
- Fix bashisms in iptables backend
- Fix size argument in inet_ntop() call
- Remove excessive logging when polling from files
- Keep looking for unreadable files while polling
- Update Dovecot signature for POP3
- Match \"Connection reset\" message for SSH
- Resurrect PID file option by popular demand
- Adjust default abuse threshold

Fri Feb 19 13:00:00 2016 joop.boonenAATTopensuse.org
- Added a corrected attack treshold value (40 default)

Thu Feb 18 13:00:00 2016 eshmarnevAATTsuse.com
- Build version 1.6.3
- Disable blacklisting by default
- Implement logging as wrappers around syslog(2)
- Improve log and error messages
- Match sendmail authentication failures
- Remove PID file option
- Remove SIGTSTP and SIGCONT handler
- Remove reverse mapping attack signature
- Remove safe_fgets() and exit on interrupt
- Terminate state entries for hosts blocked with pf
- Update and shorten command-line usage
- Use \'configure\' to set feature-test macros
- Updated patch file for new version of sshguard

Mon Jan 11 13:00:00 2016 joop.boonenAATTopensuse.org
- Added ip6tables support handles via init and service files

Fri Oct 16 14:00:00 2015 joop.boonenAATTopensuse.org
- Corrected a iptables error, that prevented sshguard
from functioning correctly

Thu Oct 15 14:00:00 2015 joop.boonenAATTopensuse.org
- Moved blacklist.db to /var/lib/sshguard/db/blacklist.db analog
most SUSE packages

Thu Oct 15 14:00:00 2015 joop.boonenAATTopensuse.org
- Corrected the blacklist as it\'s auto generated
- Improved sysconfig

Wed Oct 14 14:00:00 2015 joop.boonenAATTopensuse.org
- Build version 1.6.2
+ Make \'-w\' option backwards-compatible for iptables (James Harris)
+ Remove support for ip6fw and \'ipfw-range\' option
+ Rewrite ipfw backend using command framework
- The white and black list now initially reside in files
/etc/sshguard/whitelist|blacklist

Mon Sep 28 14:00:00 2015 joop.boonenAATTopensuse.org
- Build version 1.6.1
- Added sshguard-gcc5.patch so it also builds via gcc5
- Created a sshguard.service file so it\'ll run on systemd
systems

Wed Mar 27 13:00:00 2013 joop.boonenAATTopensuse.org
- Reformated the spec file to the openSUSE standard
so it can be submitted to Factory

Sat Feb 19 13:00:00 2011 larsAATTlinux-schulserver.de
- update to 1.5:
+ logsucker: sshguard polls multiple log files at once
+ recognize syslog\'s \"last message repeated N times\" contextually
and per-source
+ attackers now gauged with attack
*dangerousness
* instead of
count (adjust your -a !)
+ improve IPv6 support
+ add detection for: Exim, vsftpd, Sendmail, Cucipop
+ improve logging granularity and descriptiveness
+ add -i command line option for saving PID file as an aid for
startup scripts
+ update some attack signatures
- cleanup specfile via spec-cleaner

Wed Dec 1 13:00:00 2010 wrAATTrosenauer.org
- fix typo in macro
- revert a bit of cleanup to make it backwards compatible
(%_initddir)

Tue Nov 2 13:00:00 2010 prusnakAATTopensuse.org
- cleanup spec file

Wed Sep 29 14:00:00 2010 wrAATTrosenauer.org
- update to version 1.5rc4

Sun Apr 4 14:00:00 2010 wrAATTrosenauer.org
- update to version 1.5rc1

Thu Feb 11 13:00:00 2010 wrAATTrosenauer.org
- added init script and sysconfig

Wed Feb 10 13:00:00 2010 wrAATTrosenauer.org
- initial openSUSE package