summaryrefslogtreecommitdiffstats
path: root/LogActio/Reporters
Commit message (Collapse)AuthorAgeFilesLines
* reporters: Improve log events in IPTipset and SMTPreporterDavid Sommerseth2020-07-302-6/+17
| | | | | | | | The information sent to the logs was unstructured and less ideal. This unifies the log events to be similar and provide more useful details and less static text. Signed-off-by: David Sommerseth <dazo@eurephia.org>
* Migrate to Python 3David Sommerseth2020-07-305-61/+46
| | | | Signed-off-by: David Sommerseth <dazo@eurephia.org>
* IPTipset: Ensure only the first regex match is used for IP addressDavid Sommerseth2015-11-121-1/+1
| | | | | | | | This change is based on the API changes of the message strings being changed to Python lists. Currently we expect only one regex match group, where the first element is the IP address. Signed-off-by: David Sommerseth <davids@redhat.com>
* Improve the message passing to the Reporter modulesDavid Sommerseth2015-11-123-3/+3
| | | | | | | | | | | | | The message sent to the Reporter modules contained a string of each regex match group values separated by a pipe (|). This was not flexible enough, so this change will send all the regex match groups as a Python list to the Reporter. The existing Reporter modules have currently just been modified to stitch together the message list as a string identical to the old behaviour now, to ensure backwards compatibility for now. Signed-off-by: David Sommerseth <davids@redhat.com>
* Update GPL license and other related detailsDavid Sommerseth2015-10-235-25/+30
| | | | | | | | - Use the proper FSF address - Use the new contact address for David Sommerseth - Use a better wording for the GPLv2 only license Signed-off-by: David Sommerseth <davids@redhat.com>
* IPTipset: Delay exit of __cleanup_iptables()David Sommerseth2015-10-231-1/+2
| | | | | | | | | It may happen on some systems that the iptables command line have completed removing ipset rules, but things aren't quite yet ready. This adds a 5 seconds delay before ipset tries to remove the ipset list. Signed-off-by: David Sommerseth <davids@redhat.com>
* IPTipset: Increase verbosity level for logging when calling ipsetDavid Sommerseth2015-10-231-1/+1
| | | | Signed-off-by: David Sommerseth <davids@redhat.com>
* IPTipset: Add possibility to save ipset state between runsDavid Sommerseth2015-09-251-2/+45
| | | | | | | | By setting the ipset-save Reporter option to point at a file name, the state will be automatically loaded upon start and saved before LogActio stops running. Signed-off-by: David Sommerseth <davids@redhat.com>
* Fix iptables cleanup bugDavid Sommerseth2015-09-251-3/+9
| | | | Signed-off-by: David Sommerseth <davids@redhat.com>
* If an IP address is already registered, double check with ipset tooDavid Sommerseth2015-09-251-1/+10
| | | | | | | This is needed to avoid LogActio believing an IP address has been registered but have been removed from ipset - either manually or by a timeout. Signed-off-by: David Sommerseth <davids@redhat.com>
* Fix silly doc errorDavid Sommerseth2015-09-251-1/+1
| | | | Signed-off-by: David Sommerseth <davids@redhat.com>
* Added another "reporter" module - IPTipsetDavid Sommerseth2013-12-261-0/+288
| | | | | | | | | This requires currently logactio to run as root. On matches, instead of reporting the match it will use the IP address extrated via the regex and add it to an ipset(8) set (hash:ip). This set can then be used in other iptables rules to f.ex block failing attempts. Signed-off-by: David Sommerseth <dazo@users.sourceforge.net>
* Added a Qpid reporter moduleDavid Sommerseth2012-09-161-0/+123
| | | | | | | This allows alerts to be sent to a Qpid based AMQP broker. A simple alert consumer has been added as well. Signed-off-by: David Sommerseth <davids@redhat.com>
* Added a simple SMTP reporter moduleDavid Sommerseth2012-09-161-0/+142
| | | | | | This reporter module will send e-mails with the gathered information Signed-off-by: David Sommerseth <davids@redhat.com>
* Added a simple HTTP reporter moduleDavid Sommerseth2012-09-161-0/+106
| | | | | | This will send alerts to a web server via HTTP GET/POST requests Signed-off-by: David Sommerseth <davids@redhat.com>
* Initial import of logactioDavid Sommerseth2012-09-161-0/+69
This is the first step of the logactio framework Signed-off-by: David Sommerseth <davids@redhat.com>
generated by cgit (git 2.34.1) at 2026-03-17 00:33:55 +0000