Difference between revisions of "Features"

From Fail2ban
Jump to: navigation, search
(0.9.0: more references)
(updated roadmapped features)
Line 24: Line 24:
 
=== 0.9.0 ===
 
=== 0.9.0 ===
  
* Dependency back to Python 2.3 [[Image:okay.gif|done]]
+
* Add more tags (<LINE>, <USER>, <PORT>) [[Image:okay.gif|done]] Partially done -- use <MATCHES>. Also see [https://github.com/fail2ban/fail2ban/issues/10 Issue #10] and [https://github.com/fail2ban/fail2ban/issues/67 Issue #67]
* Rewrite communication [[Image:okay.gif|done]]
+
* [https://github.com/fail2ban/fail2ban/pull/25 Add support for pyinotify] [[Image:okay.gif|done in 0.8.7]]
* Add more tags (<LINE>, <USER>) [[Image:okay.gif|done]] Partially done -- use <MATCHES>. Also see [https://github.com/fail2ban/fail2ban/issues/10 Issue #10]
+
* [https://github.com/fail2ban/fail2ban/pull/25 Add support for pyinotify] [[Image:okay.gif|done]] but has [https://github.com/fail2ban/fail2ban/issues/44 outstanding issues to be resolved before release]
+
 
* [https://github.com/fail2ban/fail2ban/issues/55 Auto-enable feature (activate jail if log file is present)]
 
* [https://github.com/fail2ban/fail2ban/issues/55 Auto-enable feature (activate jail if log file is present)]
 +
* Manual control of ban list (ban, unban, reset). [[Image:okay.gif|done]] Partially done [https://github.com/fail2ban/fail2ban/issues/53 Issue #53] . You currently have to restart the daemon to unban.
 +
** There's [http://blogs.buanzo.com.ar/2009/04/fail2ban-patch-ban-ip-address-manually.html a patch by Buanzo] that adds a 'banip' command to fail2ban-client.
  
 
=== Other envisioned changes ===
 
=== Other envisioned changes ===
Line 34: Line 34:
 
* Decrease memory usage
 
* Decrease memory usage
 
* [https://github.com/fail2ban/fail2ban/issues/54 Multi-lines parsing]
 
* [https://github.com/fail2ban/fail2ban/issues/54 Multi-lines parsing]
* Manual control of ban list (ban, unban, reset). You currently have to restart the daemon to unban.
 
** There's [http://blogs.buanzo.com.ar/2009/04/fail2ban-patch-ban-ip-address-manually.html a patch by Buanzo] that adds a 'banip' command to fail2ban-client.
 
  
  
 
[[Category:Fail2ban]]
 
[[Category:Fail2ban]]

Revision as of 15:27, 1 August 2012

Current features (0.8.x)

Here is a list of the main features available in Fail2ban.

  • Client/Server architecture.
  • Multi-threaded.
  • Highly configurable.
  • FAM/Gamin support.
  • Parses log files and looks for given patterns.
  • Executes commands when a pattern has been detected for the same IP address for more than X times. X can be changed.
  • After a given amount of time, executes another command in order to unban the IP address.
  • Uses Netfilter/Iptables by default but can also use TCP Wrapper (/etc/hosts.deny) and many other actions.
  • Handles log files rotation.
  • Can handle more than one service (sshd, apache, vsftpd, etc).
  • Resolves DNS hostname to IP address.

Roadmap

Here is the planned roadmap. If you want to contribute or help on one of these features, please contact the fail2ban-users mailing list or browse/comment/report on existing issues on github.

Please browse Fail2ban milestones for an up-to-date list of planned releases/features.

Below are some items from older roadmap

0.9.0

Other envisioned changes