Changelog
fail2ban (0.8.7-1) experimental; urgency=low
* New upstream release:
- inotify backend is supported (and the default if pyinotify is present).
It should bring number of wakeups to minimum (Closes: #481265)
- usedns jail.conf parameter to disable reverse DNS mapping to
avoid of DoS (see #588431, #514239 for related discussions)
- enforces non-unicode logging (Closes: #657286)
- new jail "recidive" to ban repeated offenders (Closes: #333557)
- catch failed ssh logins due to being listed in DenyUsers (Closes: #669063)
- document in config/*.conf on how to inline comments (Closes: #676146)
- match possibly present "pam_unix(sshd:auth):" portion for sshd
(Closes: #648020)
- wu-ftpd: added failregex for use against syslog. Switch to monitor syslog
(instead of auth.log) by default (Closes: #514239)
- anchor chain name in actioncheck's for iptables actions (Closes: #672228)
* debian/jail.conf:
- adopted few jails from "upstreams" jail.conf: asterisk, recidive,
lighttpd, php-url-open
- provide instructions in jail.conf on how to comment (Closes: #676146)
Thanks Stefano Forli for a report
* debian/fail2ban.init:
- Should-(start|stop): iptables-persistent (Closes: #598109),
ferm (Closes: #604843)
- 'status' exits with code 3 if fail2ban is not running (Closes: #653074)
Thanks Glenn Aaldering for the patch
* debian/source:
- switch to 3.0 (quilt) format
* debian/control,rules:
- switch to use dh_python2 (Closes: #616803)
- boost policy compliance to 3.9.3
- recommend python-pyinotify and only suggest python-gamin
-- Yaroslav Halchenko <email address hidden> Tue, 31 Jul 2012 16:51:40 -0400
