DenyHosts is a utility developed by Phil Schwartz and maintained by a number of
developers which aims to thwart sshd (ssh server) brute force attacks.
If you've ever looked at your ssh log (/var/log/auth.log) you may be alarmed
to see how many hackers attempted to gain access to your server.
Denyhosts helps you:
- Parses /var/log/auth.log to find all login attempts
- Can be run from the command line, cron or as a daemon (new in 0.9)
- Records all failed login attempts for the user and offending host
- For each host that exceeds a threshold count, records the evil host
- Keeps track of each non-existent user (eg. sdada) when a login attempt failed.
- Keeps track of each existing user (eg. root) when a login attempt failed.
- Keeps track of each offending host (hosts can be purged)
- Keeps track of suspicious logins
- Keeps track of the file offset, so that you can reparse the same file
- When the log file is rotated, the script will detect it
- Appends /etc/hosts.allow
- Optionally sends an email of newly banned hosts and suspicious logins.
- Resolves IP addresses to hostnames, if you want
all: remove explicit versions in USES=python for "3.x+"
The logic in USES=python will automatically convert this to 3.8+ by
itself.
Adjust two ports that only had Python 3.7 mentioned but build fine
on Python 3.8 too.
finance/quickfix: mark BROKEN with PYTHON
libtool: compile: c++ -DHAVE_CONFIG_H -I. -I../.. -I -I. -I.. -I../.. -I../C++
-DLIBICONV_PLUG -DPYTHON_MAJOR_VERSION=3 -Wno-unused-variable
-Wno-maybe-uninitialized -O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong
-fno-strict-aliasing -DLIBICONV_PLUG -Wall -ansi
-Wno-unused-command-line-argument -Wpointer-arith -Wwrite-strings
-Wno-overloaded-virtual -Wno-deprecated-declarations -Wno-deprecated -std=c++0x
-MT _quickfix_la-QuickfixPython.lo -MD -MP -MF
.deps/_quickfix_la-QuickfixPython.Tpo -c QuickfixPython.cpp -fPIC -DPIC -o
.libs/_quickfix_la-QuickfixPython.o
warning: unknown warning option '-Wno-maybe-uninitialized'; did you mean
'-Wno-uninitialized'? [-Wunknown-warning-option]
QuickfixPython.cpp:175:11: fatal error: 'Python.h' file not found
^~~~~~~~~~
1 warning and 1 error generated.
Reviewed by: portmgr, vishwin, yuri
Differential Revision: <https://reviews.freebsd.org/D40568>
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
- Add missing OPTIONS_DEFINE
- Convert PYDISTUTILS_AUTOPLIST and USE_PYDISTUTILS to USE_PYTHON
- Remove python from SHEBANG_LANG
- Add REINPLACE_ARGS
- Move .bak/.orig removal from pre-install: to post-patch:
- Use @sample
- Bump PORTREVISION for package change
- Take maintainership
Security/denyhosts: Limit to python 2.x and reset maintainer
The maintainer has not been responsive and multiple PRs have timed out.
Convert USE_PYTHON=yes to USES=python:2 as this application will not
run on Python 3.x
PR: 187408
Submitted by: corsmith (gmail)
Approved by: maintainer timeout
In the rc.d scripts, change assignments to rcvar to use the
literal name_enable wherever possible, and ${name}_enable
when it's not, to prepare for the demise of set_rcvar().
In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.
- Add support for new PAM based log formats in the config file
- Bump portrevision
PR: ports/158913
Submitted by: Janos Mohacsi <janos.mohacsi@bsd.hu> (maintainer)
- Add a patch to correct the location of nologin.
- Bump PORTREVISION.
PR: ports/129186
Submitted by: Till Klampaeckel <till@php.net>
Approved by: maintainer
- Make Python 2.5.1 the default Python version
- Add significantly better support in bsd.python.mk for working with
Python Eggs and the easy_install system
Tested by: pointyhat runs
Approved by: pav (portmgr)
Most work by: perky
Thanks to: pav
Add a note to pkg-message warning users about potential problems
relating to default syslogd(8) behavior.
PR: ports/102605
Submitted by: Jeremie Le Hen <jeremie@le-hen.org>
Approved by: maintainer timeout (5 weeks)
- Update to 2.5
* ADMIN_EMAIL pref can now contain multiple email addresses delimited by a
comma (white space is optional). eg. foo@bar.com, bar@foo.com,
foobar@foo.com
* fixed bug in denyfileutil: 'timestamp' is now initialized properly
* daemon-control-dist: modified to work w/ non-default python versions. You
must change the PYTHON_BIN and #!/bin/env/python references if appropriate.
* added a debug message when loading allowed-hosts fails.
* fixed bug when reporting suspicious login activity.
PR: ports/99636
Submitted by: maintainer
