14:41 Cy Schubert (cy) 

security/py-fail2ban: Remove systemd filter

Fixes:		c98813ccb078
MFH:		2025Q2

    81a3ef6

04:42 Cy Schubert (cy) 

security/py-fail2ban: Install bsd-sshd-session.conf in correct path

Reported by:	Adam McDougall <mcdouga9@egr.msu.edu>
Fixes:		c98813ccb078
MFH		2025Q2

    b457098

13:42 Dan Langille (dvl) 

security/py-fail2ban: fix typo in pkg-message

Approved by:	portmgr (blanket)

    37eb91d

15:44 Cy Schubert (cy) 

security/py-fail2ban: Add support for sshd-session

Now that sshd has been split into sshd and sshd-session, sshd-session
is now the producer of syslog messages. We cannot replace the existing
*sshd.conf files because this port must also run on older systems with
older OpenSSH. Therefore we add new filters to support both.

Reported by:	sef (private email)
MFH:		2025Q1

    c98813c

04:05 Charlie Li (vishwin) 

python: bump all USE_PYTHON=distutils consumers after RUN_DEPENDS removal

Any missed ports, feel free to bump.

Any ports that need setuptools at runtime can have the devel/py-setuptools
manually added back to RUN_DEPENDS, but understand that this practice
is deprecated; see CHANGES for details.

    06a08e6

04:16 Cy Schubert (cy) 

security/py-fail2ban: Update 1.0.2 --> 1.1.0

    54e5653

22:32 Muhammad Moinur Rahman (bofh) 

security/py-fail2ban: Sanitize MANPREFIX

Approved by:    portmgr (blanket)

    8dda5d0

19:34 Rene Ladan (rene) 

all: remove explicit versions in USES=python for "3.x+"

The logic in USES=python will automatically convert this to 3.8+ by
itself.

Adjust two ports that only had Python 3.7 mentioned but build fine
on Python 3.8 too.

finance/quickfix: mark BROKEN with PYTHON

libtool: compile:  c++ -DHAVE_CONFIG_H -I. -I../.. -I -I. -I.. -I../.. -I../C++
-DLIBICONV_PLUG -DPYTHON_MAJOR_VERSION=3 -Wno-unused-variable
-Wno-maybe-uninitialized -O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong
-fno-strict-aliasing -DLIBICONV_PLUG -Wall -ansi
-Wno-unused-command-line-argument -Wpointer-arith -Wwrite-strings
-Wno-overloaded-virtual -Wno-deprecated-declarations -Wno-deprecated -std=c++0x
-MT _quickfix_la-QuickfixPython.lo -MD -MP -MF
.deps/_quickfix_la-QuickfixPython.Tpo -c QuickfixPython.cpp  -fPIC -DPIC -o
.libs/_quickfix_la-QuickfixPython.o
warning: unknown warning option '-Wno-maybe-uninitialized'; did you mean
'-Wno-uninitialized'? [-Wunknown-warning-option]
QuickfixPython.cpp:175:11: fatal error: 'Python.h' file not found
          ^~~~~~~~~~
1 warning and 1 error generated.

Reviewed by:	portmgr, vishwin, yuri
Differential Revision:	<https://reviews.freebsd.org/D40568>

    3d9a815

22:06 Cy Schubert (cy) 

security/py-fail2ban: Fix FAIL2BAN_DBDIR

FAIL2BAN_DBDIR is a user set option. Unfortunately plist is not updated
resulting in plist errors.

PR:	271972
MFH:	2023Q2

    1036c8d

18:07 Cy Schubert (cy) 

security/py-fail2ban: Update to 1.0.2

Update to 1.0.2. This update includes the fix for upstream gh-issue-3370,
which is now removed from our patches.

Reported by:	Ken <mayhem30@gmail.com>

    72a671a

13:56 Cy Schubert (cy) 

security/py-fail2ban: Import fix for upsteam issue gh-3370

Fix dovecot jail causes 100% CPU usage (upstream GH issue 3370).

Reported by:	Michael Grimm <trashcan@ellael.org>
		Roger Marquis <marquis@roble.com>
Obtained from:	https://github.com/fail2ban/fail2ban/issues/3370
		Upstream commit ca2b94c5
MFH		2022Q4

    5b056b1

16:00 Cy Schubert (cy) 

security/py-fail2ban: Fix build

Fixes:		4650a958fe57

    0f8625d

15:06 Cy Schubert (cy) 

security/py-fail2ban: Update to 1.0.1

This major release of fail2ban includes many bugfixes and features.
See https://github.com/fail2ban/fail2ban/releases for more information.

Add comment about "build" being performed in post-patch.

Assume maintainership.

PR:		266810
Approved by:	MAINTAINER (theis@gmx.at)

    97829d2

15:06 Cy Schubert (cy) 

security/py-fail2ban: Python is used at runtime

Register the fact that python is also used at runtime.

    4650a95

15:06 Cy Schubert (cy) 

security/py-fail2ban: Add ipfilter ippool action

Rather than add a block rule for each banned IP, add a blanket block rule
that references an ipfilter ippool named fail2ban. Maintain the IPs in
the ippool reducing the need to search a large list of rules. An ipfilter
tree pool is used.

    d0fcbc6

21:10 Stefan Eßer (se) 

Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)

    b7f0544

15:48 Yasuhiro Kimura (yasu) 

security/py-fail2ban: Add upstream patch to fix possible RCE vulnerability

* Switch to DISTVERSION
* Pet portclippy
* Reformat Makefile with portfmt

PR:		259297
Approved by:	maintainer
Obtained
from:	https://github.com/fail2ban/fail2ban/commit/410a6ce5c80dd981c22752da034f2529b5eee844
MFH:		2021Q4
Security:	CVE-2021-32749
Security:	https://github.com/fail2ban/fail2ban/security/advisories/GHSA-m985-3f3v-cwmm
Differential Revision:	https://reviews.freebsd.org/D32576

    644e5b6

19:17 Bernhard Froehlich (decke) 

security/py-fail2ban: Add CPE information

Approved by:	portmgr (blanket)

    4cc3fb6

14:45 Neel Chauhan (nc)  Author: Yasuhiro Kimura

security/py-fail2ban: Add upstream patches to fix runtime error with Python 3.10

PR:		257784
Approved by:	theis AT gmx DOT at (maintainer)

    e8d8664

16:02 Kevin Bowling (kbowling)  Author: Florian Koczan

security/py-fail2ban: Create required start dir

Reported at https://github.com/fail2ban/fail2ban/issues/2634
fail2ban should check and, if necessary create, the required directory.

It is still up to the user to ensure that configuration in fail2ban's
conf files and FreeBSD's /etc/rc.conf are in sync and that both, pidfile
and socket reside in the same directory.

PR:		244092
Approved by:	maintainer
MFH:		2021Q2

    b48d2a6

08:09 Mathieu Arnold (mat) 

One more small cleanup, forgotten yesterday.
Reported by:	lwhsu

    cf118cc

14:31 Mathieu Arnold (mat) 

Remove # $FreeBSD$ from Makefiles.

    305f148

21:25 rene 

Simplify some ports using PYTHON_MAJOR_VER and Python 3.6+

 

23:02 antoine 

Drop python 2.7 support from a few ports

With hat:	portmgr

 

21:21 madpilot 

- Update fail2ban to 0.11.2
- Remove patches now included in the upstream code
- Adapt option to not install test files

PR:		251341
Submitted by:	theis@gmx.at (maintainer)

 

02:08 meta 

security/py-fail2ban: Fix runtime error with Python 3.9

PR:		250356
Submitted by:	Yasuhiro KIMURA <yasu@utahime.org>
Approved by:	theis@gmx.at (maintainer)
Obtained from:	https://bugzilla.redhat.com/show_bug.cgi?id=1808347
Obtained from:	https://github.com/fail2ban/fail2ban/issues/2646
Obtained from:	https://github.com/fail2ban/fail2ban/pull/2651

 

15:29 madpilot 

Add new regexp to match invalid users to bsd-ssh filter.

I have observed a regression where the old expression was not
working. Looks like the regression was caused by the migration to
python 3.

As far as I can see the quarterly branch is not affected.

PR:		245097
Approved by: portmgr (blanket: run-time bugfix)

 

07:49 meta 

security/py-fail2ban: Update to 0.11.1

PR:		243325
Submitted by:	maintainer
Relnotes:	https://github.com/fail2ban/fail2ban/blob/0.11.1/ChangeLog
Sponsored by:	HAW international

 

10:14 kai 

security/py-fail2ban: Add support for devel/py-pyinotify

* Enable support for devel/py-pyinotify that itself uses devel/libinotify to
  monitor changes in the filesystem. [1]

* Also introduce the new dependency as an additional default option INOTIFY
  while I'm here because it's not a hard requirement for runtime. [2]

PR:		238427
Submitted by:	Dmitry Wagin <dmitry.wagin@ya.ru> [1]
Approved by:	theis@gmx.at (maintainer) [1] [2]

 

11:55 koobs 

security/py-fail2ban: Fix rc script

The rc.d script evaluates fail2ban_pidfile before rc.conf is read.

This change moves those evaluations to the corect place allowing
users to override the values via /etc/rc.conf as expected.

PR:		236017
Reported by:	<epopen gmail com>, Dmitry Wagin <dmitry.wagin ya ru>
Submitted by:	<theis gmx at> (maintainer)
MFH:		2019Q2

 

05:02 swills 

security/py-fail2ban: Update to 0.10.4

PR:		231947
Submitted by:	theis@gmx.at (maintainer)

 

19:09 swills 

security/py-fail2ban: Fix writing /etc/hosts.deny entries

PR:		227577
Submitted by:	theis@gmx.at (maintainer)
Reported by:	Niels Bakker <niels=freebsd@bakker.net>

 

17:05 mat 

Use PY_FLAVOR for dependencies.

FLAVOR is the current port's flavor, it should not be used outside of
this scope.

Sponsored by:	Absolight

 

04:48 joneum 

security/py-fail2ban: Update to 0.10.3.1

Changelog: https://github.com/fail2ban/fail2ban/blob/0.10.3.1/ChangeLog

PR:		227424
Submitted by:	theis@gmx.at (maintainer)

 

18:17 joneum 

security/py-fail2ban: Update to 0.10.3

Changelog: https://github.com/fail2ban/fail2ban/blob/0.10.3.1/ChangeLog

PR:		227389
Submitted by:	theis@gmx.at (maintainer)

 

12:37 mat 

Fix build with Python != 2.7

Pointy hat:	pi
Sponsored by:	Absolight

 

20:13 pi 

security/py-fail2ban: update 0.10.1 -> 0.10.2

- many fixes from upstream for bugs in the 0.10.x version
- automatic upgrade of python code to python3, if that is used

PR:		225317
Submitted by:	theis@gmx.at (maintainer)
Changes:	https://github.com/fail2ban/fail2ban/blob/0.10.2/ChangeLog

 

15:50 mat 

Convert Python ports to FLAVORS.

  Ports using USE_PYTHON=distutils are now flavored.  They will
  automatically get flavors (py27, py34, py35, py36) depending on what
  versions they support.

  There is also a USE_PYTHON=flavors for ports that do not use distutils
  but need FLAVORS to be set.  A USE_PYTHON=noflavors can be set if
  using distutils but flavors are not wanted.

  A new USE_PYTHON=optsuffix that will add PYTHON_PKGNAMESUFFIX has been
  added to cope with Python ports that did not have the Python
  PKGNAMEPREFIX but are flavored.

  USES=python now also exports a PY_FLAVOR variable that contains the
  current python flavor.  It can be used in dependency lines when the
  port itself is not python flavored.  For example, deskutils/calibre.

  By default, all the flavors are generated.  To only generate flavors
  for the versions in PYTHON2_DEFAULT and PYTHON3_DEFAULT, define
  BUILD_DEFAULT_PYTHON_FLAVORS in your make.conf.

  In all the ports with Python dependencies, the *_DEPENDS entries MUST
  end with the flavor so that the framework knows which to build/use.
  This is done by appending '@${PY_FLAVOR}' after the origin (or
  @${FLAVOR} if in a Python module with Python flavors, as the content
  will be the same).  For example:

    RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}six>0:devel/py-six@${PY_FLAVOR}

PR:		223071
Reviewed by:	portmgr, python
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D12464

 

14:11 wen 

- Patch for user of pf

PR:		223069
Submitted by:	theis@gmx.at(maintainer)

 

10:56 wen 

- Update to 0.10.1

PR:		223022
Submitted by:	theis@gmx.at(maintainer)

 

10:58 wen 

- Update t0 0.10
- Update pkg-message

PR:		221442
Submitted by:	theis@gmx.at(maintainer)

 

18:15 sunpoet 

Update to 0.9.7 [1]

- Fix shebang line of fail2ban-python in apache-fakegooglebot [2]
- While I'm here:
  - Add missing OPTIONS_DEFINE=DOCS
  - Use SHEBANG_LANG
  - Convert to options target helper

Changes:	https://github.com/fail2ban/fail2ban/blob/0.9/ChangeLog
PR:		219733 [1], 219419 [2]
Submitted by:	<theis@gmx.at> (maintainer) [1], Lukasz Wasikowski
<lukasz@wasikowski.net> [2]

 

21:25 lifanov 

Update fail2ban to version 0.9.6

PR:		215239
Submitted by:	John W. O'Brien <john@saltant.com>
Reviewed by:	matthew
Approved by:	theis@gmx.at (maintainer), matthew (mentor)
Differential Revision:	https://reviews.freebsd.org/D8917

 

16:06 pawel 

Update to version 0.9.5

PR:		211262
Submitted by:	maintainer

 

13:09 pi 

security/py-fail2ban: Fix for Bug #1417 / #1419

For details see https://github.com/fail2ban/fail2ban/pull/1419

PR:		209494
Submitted by:	theis@gmx.at (maintainer)

 

14:25 mat 

Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.

With hat:	portmgr
Sponsored by:	Absolight

 

11:20 riggs 

Update to upstream version 0.9.4

PR:		207886
Submitted by:	theis@gmx.at (maintainer)

 

10:52 koobs 

security/py-fail2ban: Modernize and cleanup

- Use autoplist, update pkg-plist accordingly, deprecate py3kplist
- Remove unnecessary PYDISTUTILS_PKGVERSION and --install-purelib args
- Cleanup a REINPLACE to be more explicit
- Add do-test target
- Regenerate patches (makepatch compatible)
- Add NO_ARCH
- Sort and group USE{S,_*} entries

PR:		204373
Approved by:	maintainer <theis gmx at>

 

12:09 robak 

security/py-fail2ban: update 0.9.2 -> 0.9.3

- Add LICENSE_FILE

PR:		202026
Submitted by:	Christoph Theis <theis@gmx.at> (maintainer)

 

21:10 amdmi3 

- Fix shebangs

Approved by:	portmgr blanket
MFH:		2015Q3 (blanket)

 

17:41 mat 

Update ports in the s* categores to not use GH_COMMIT.

With minor cleanups to make things simpler.

With hat:	portmgr
Sponsored by:	Absolight

 

17:32 ache 

Remove deprecated GH_COMMIT (DEVELOPER=yes warning)

 

21:57 ache 

Update fail2ban to version 0.9.2

PR:     200002
Submitted by:   theis@gmx.at (maintainer update)

 

17:00 sunpoet 

- Fix build with python3*
- Do not silence installation message

PR:		196336
Submitted by:	Kevin Zheng <kevinz5000@gmail.com>
Approved by:	<theis@gmx.at> (maintainer)

 

14:41 wen 

- Update to 0.9.1

PR:		194815
Submitted by:	theis@gmx.at(maintainer)

 

16:50 mva 

- Convert ports of science/ and security to new USES=python

Approved by:	portmgr (implicit)

 

19:09 ache 

Fix recidive jail.
Add a patch for the recidive jail from upstream.

PR:     193751
Submitted by:   theis@gmx.at (maintainer update)

 

19:31 tijl 

- Patch a script to use the right syslogd socket (/var/run/log)
- Remove .keep_me files because pkg can handle empty directories

PR:		193621
Submitted by:	theis@gmx.at (maintainer)

 

18:30 adamw 

Formally create the /var/run/fail2ban directory

 

18:22 adamw 

Install manpages [1] and create /var/{run,db} directories [2]

PR:		ports/189781 [1], ports/189376 [2]
Approved by:	maintainer

 

13:17 sunpoet 

- Update to 0.9.0
- While I'm here:
  - Move RUN_DEPENDS upwards
  - Fix space/tab

Changes:	https://github.com/fail2ban/fail2ban/blob/master/ChangeLog
PR:		ports/188426
Submitted by:	Christoph Theis <theis@gmx.at> (maintainer)

 

17:57 adamw 

Remove unnecessary inclusion of bsd.port.options.mk.

 

16:44 sunpoet 

- Update to 0.8.12

Changes:	https://github.com/fail2ban/fail2ban/releases
PR:		ports/186683
Submitted by:	Christoph Theis <theis@gmx.at> (maintainer)

 

21:00 rene 

Python cleanup:
- USE_PYTHON* = 2.X -> USE_PYTHON* = 2
- USE_PYTHON* = 2.X+ -> USE_PYTHON* = yes
Reviewed by:	python (mva, rm)
Approved by:	portmgr-lurkers (mat)

 

21:33 sunpoet 

- Fix PLIST
- Bump PORTREVISION for package change

PR:		ports/184336
Submitted by:	Christoph Theis <theis@gmx.at> (maintainer)

 

11:34 sunpoet 

- Update to 0.8.11

Changes:	https://github.com/fail2ban/fail2ban/releases
PR:		ports/184213
Submitted by:	Christoph Theis <theis@gmx.at> (maintainer)

 

22:55 bapt 

Add NO_STAGE all over the place in preparation for the staging support (cat:
security)

 

14:23 culot 

- Update to 0.8.10

Changes:        https://raw.github.com/fail2ban/fail2ban/master/ChangeLog
PR:             ports/179528
Submitted by:   Christoph Theis <theis@gmx.at> (maintainer)

 

22:35 ak 

- Remove MAKE_JOBS_SAFE variable

Approved by:	portmgr (bdrewery)

 

14:21 culot 

- Update to 0.8.9 [1]
- Make additional documentation installation conditional
  (note: run-rootless.txt not installed as not relevant for FreeBSD)

Changes:        https://raw.github.com/fail2ban/fail2ban/master/ChangeLog
PR:             ports/179426 [1]
Submitted by:   Christoph Theis <theis@gmx.at> (maintainer)

 

22:23 ache 

Remove patch unneded in 0.8.8

PR:     176426
Submitted by:   Christoph Theis <theis@gmx.at> [maintainer]

 

12:36 culot 

- Update to 0.8.8

Changes:        https://raw.github.com/fail2ban/fail2ban/master/ChangeLog
PR:             ports/176368
Submitted by:   Christoph Theis <theis@gmx.at> (maintainer)

 

14:44 rm 

- do not hardcode path to grep utility

PR:		176058
Submitted by:	Christoph Theis <theis@gmx.at> (maintainer)

 

18:44 wxs 

Minor enhancements:

1) Add a fix for https://github.com/fail2ban/fail2ban/issues/91 (Spurious
UTF8 in SYSLOG is not fully fixed)
2) Add a filter for sendmail, the default mailer on FreeBSD
3) Make the ipfw table used in the action bsd-ipfw configurable

PR:		ports/173956
Submitted by:	Christoph Theis <theis@gmx.at> (maintainer)

 

10:53 rm 

- correct displaying of pkg-message

while here:
- use one space in Created by:
- some whitespace aligning
- correct python versions in USE_PYTHON
- use PYDISTUTILS_PKGVERSION to set correct package version instead of crafting
  full PYDISTUTILS_EGGINFO
- remove trailin whitespace in pkg-descr and unneded newlines in pkg-message

PR:		174044
Submitted by:	Sayetsky Anton <vsjcfm@gmail.com>
Approved by:	Christoph Theis <theis@gmx.at> (maintainer)
Feature safe:	yes

 

03:08 swills 

- Update to 0.8.7.1
- Fix installation so it doesn't overwrite your config files every time you
  upgrade the port
- Fix some space/tab issues to make portlint happy
- Use dirrmtry in a few places because some people have their own custom
  filters, actions, etc.

PR:		ports/171708
Submitted by:	Mark Felder <feld@feld.me>
Approved by:	Christoph Theis <theis@gmx.at> (maintainer)
Feature safe:	yes

 

18:58 pgollucci 

- Update to 0.8.6

PR:             ports/164829
Submitted by:   Christoph Theis <theis@gmx.at> (maintainer)

22:23 ohauer 

- fix reg. expression in filter.d/common.conf
- over to new maintainer

PR:             ports/157979
Submitted by:   Christoph Theis <theis _at_ gmx.at> (new maintainer)

02:08 wxs 

- Include configuration file for pf.
- Add patch for supporting syslogd -v or -vv.

PR:             ports/157318
Submitted by:   Nick Hilliard <nick@foobar.org>
Approved by:    maintainer timeout

07:01 sahil 

Expand the range of supported Python versions and
pacify portlint(1).

PR:             ports/154374
Submitted by:   Jase Thew <freebsd@beardz.net>
Approved by:    maintainer timeout

19:43 pgollucci 

- Assign to new volunteer

03:31 pgollucci 

- Update to 0.8.4

PR:             ports/143020
Submitted by:   Kevin Kobb <kkobb@skylinecorp.com>

05:24 pgollucci 

- rc.d fix [2]
- broken on 2.6, 2.3 is gone, and 2.4 is gone soon, so only 2.5 [1]

PR:             ports/142849 [2]
Submitted by:   Krzysztof Stryjek <admin@bsdserwis.com> [1], miwi [2]

00:35 amdmi3 

- Switch SourceForge ports to the new File Release System: categories starting
with P,R,S

15:55 pgollucci 

- Correct regex for the defaults in FreeBSD

Submitted by:   "Bakker, Johan" <johan_bakker@epson.eu>

06:19 pgollucci 

- Add an rc.d script

Submitted by:   sd@mostnet.ru (via e-mail)

06:27 pgollucci 

- Mark most of my ports MAKE_JOBS_SAFE=yes

Tested by: several builds in P6 TB

18:22 pgollucci 

Fail2ban scans log files like /var/log/pwdfail or /var/log/apache/error_log
and bans IP that makes too many password failures. It updates
firewall rules to reject the IP address.

WWW: http://www.fail2ban.org/wiki/index.php/Main_Page