Changelog for sshguard-2.1.0-39.2.x86_64.rpm :

* Thu Nov 08 2018 joop.boonenAATTopensuse.org- Corrected the service scripts, start after network.target
* Tue Jan 30 2018 joop.boonenAATTopensuse.org- Build version 2.1.0 - Add nftables backend - Add monitoring support for new service: Cockpit, Linux server dashboard - Match \"maximum authentication attempts\" for SSH - Match Debian-style \"Failed password for invalid user\" for SSH - Add monitoring support for new service: Common webserver probes, in Common Log Format - Match \'Disconnecting invalid user\' for SSH - Add monitoring support for new service: WordPress, in Common Log Format - Add monitoring support for new service: SSHGuard - Firewall backends now support blocking subnets. - Add new IPV6_SUBNET and IPV4_SUBNET configuration options. Defaults to traditional single-address blocking. - Log whitelist matches with higher priority - Match port number in \"invalid user\" attack - FirewallD backend reloads firewall configuration less often.- In version 2.0.0 - Add
*
*firewalld
*
* backend - Add
*
*ipset
*
* backend - Annotate logs using
*
*-a
*
* flag to
*
*sshg-parser
*
* - Match \"no matching cipher\" for SSH - Preliminary support for Capsicum and pledge() - Resurrect
*
*ipfilter
*
* backend - Support reading from os_log on macOS 10.12 and systemd journal - Add warning when reading from standard input - Build and install all backends by default - Improve log messages and tweak logging priorities - Runtime flags now configurable in the configuration file - SSHGuard
*requires
* a configuration file to start - Remove process validation (
*
*-f
*
* option) - Fix
*
*ipfw
*
* backend on FreeBSD 11 - Fix initial block time - Update Dovecot pattern for macOS - Use standard score for Sendmail auth attack - sshguard-gcc5.patch isn\'t needed any more
* Thu Nov 23 2017 rbrownAATTsuse.com- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)
* Wed Mar 01 2017 joop.boonenAATTopensuse.org- Add a systemd journal tail so sshguard can parse this file
* Thu Dec 29 2016 joop.boonenAATTopensuse.org- Build version 1.7.1 - Add sample Mac OS X 10.12 style launchd.plist - Allow multiple forward slashes in process name - Log released addresses only when debugging - Process validation (``-f`` option) is deprecated - Adjust TIMESTAMP_ISO8601 for Mac OS X 10.12 - Fix build error in hosts backend - Fix empty functions in firewall scripts causing errors with Bash - Flush stdout after every line in sshg-parser - Add
*sshg-logtail
* - Add
*sshg-parser
* - Control firewall using
*sshg-fw
* - Match \"no matching key exchange method\" for SSH - Hosts backend is deprecated - Logsuck (``-l`` option) is deprecated, use
*sshg-logtail
* instead - Process validation (``-f`` option) is deprecated - Remove external hooks (``-e`` option) - Remove support for genfilt and ipfilter backends - Accept socklog messages without a timestamp - Fix excessive logging causing endless looping in logsuck - Fix undefined assignment of initial inode number - Match Postfix pre-authentication disconnects - Fix bashisms in iptables backend - Fix size argument in inet_ntop() call - Remove excessive logging when polling from files - Keep looking for unreadable files while polling - Update Dovecot signature for POP3 - Match \"Connection reset\" message for SSH - Resurrect PID file option by popular demand - Adjust default abuse threshold
* Fri Feb 19 2016 joop.boonenAATTopensuse.org- Added a corrected attack treshold value (40 default)
* Thu Feb 18 2016 eshmarnevAATTsuse.com- Build version 1.6.3 - Disable blacklisting by default - Implement logging as wrappers around syslog(2) - Improve log and error messages - Match sendmail authentication failures - Remove PID file option - Remove SIGTSTP and SIGCONT handler - Remove reverse mapping attack signature - Remove safe_fgets() and exit on interrupt - Terminate state entries for hosts blocked with pf - Update and shorten command-line usage - Use \'configure\' to set feature-test macros- Updated patch file for new version of sshguard
* Mon Jan 11 2016 joop.boonenAATTopensuse.org- Added ip6tables support handles via init and service files
* Fri Oct 16 2015 joop.boonenAATTopensuse.org- Corrected a iptables error, that prevented sshguard from functioning correctly
* Thu Oct 15 2015 joop.boonenAATTopensuse.org- Moved blacklist.db to /var/lib/sshguard/db/blacklist.db analog most SUSE packages
* Thu Oct 15 2015 joop.boonenAATTopensuse.org- Corrected the blacklist as it\'s auto generated- Improved sysconfig
* Wed Oct 14 2015 joop.boonenAATTopensuse.org- Build version 1.6.2 + Make \'-w\' option backwards-compatible for iptables (James Harris) + Remove support for ip6fw and \'ipfw-range\' option + Rewrite ipfw backend using command framework- The white and black list now initially reside in files /etc/sshguard/whitelist|blacklist
* Mon Sep 28 2015 joop.boonenAATTopensuse.org- Build version 1.6.1- Added sshguard-gcc5.patch so it also builds via gcc5- Created a sshguard.service file so it\'ll run on systemd systems
* Wed Mar 27 2013 joop.boonenAATTopensuse.org- Reformated the spec file to the openSUSE standard so it can be submitted to Factory
* Sat Feb 19 2011 larsAATTlinux-schulserver.de- update to 1.5: + logsucker: sshguard polls multiple log files at once + recognize syslog\'s \"last message repeated N times\" contextually and per-source + attackers now gauged with attack
*dangerousness
* instead of count (adjust your -a !) + improve IPv6 support + add detection for: Exim, vsftpd, Sendmail, Cucipop + improve logging granularity and descriptiveness + add -i command line option for saving PID file as an aid for startup scripts + update some attack signatures- cleanup specfile via spec-cleaner
* Wed Dec 01 2010 wrAATTrosenauer.org- fix typo in macro- revert a bit of cleanup to make it backwards compatible (%_initddir)
* Tue Nov 02 2010 prusnakAATTopensuse.org- cleanup spec file
* Wed Sep 29 2010 wrAATTrosenauer.org- update to version 1.5rc4
* Sun Apr 04 2010 wrAATTrosenauer.org- update to version 1.5rc1
* Thu Feb 11 2010 wrAATTrosenauer.org- added init script and sysconfig
* Wed Feb 10 2010 wrAATTrosenauer.org- initial openSUSE package