43 Commits

Author SHA1 Message Date
219b536913 Swap from amazon to hetzner ip 2025-10-05 20:54:36 +02:00
77c046f0c2 split up rejects 2025-10-05 20:53:08 +02:00
68d2e267b2 Add support for exceeded LoginGraceTime 2025-08-14 00:11:46 +02:00
0d1bdf84e1 Add support for timeout before authentication message 2025-07-24 22:58:40 +02:00
058792486c Make db->init() more sensible, config->db_connect is the only one handling the db connection (remote db->init from config->new) 2025-07-06 15:23:44 +02:00
2806ce4948 Remove unneeded logging 2025-07-01 20:15:19 +02:00
22fc70b64c Removing authenticating from regex 2025-07-01 20:13:41 +02:00
5ad45bbb65 Add work ip + SSLlabs 2025-07-01 20:13:14 +02:00
23a4b9abe3 Timeouts aren't hostile (enough) 2025-07-01 20:12:43 +02:00
7b7083adca Disable auto-reconnect, and handle db/dbh centrally-ish 2025-07-01 20:11:57 +02:00
999bc6c8c8 Add ssh.pm to the auto-reconnect-fun 2025-05-27 01:30:50 +02:00
e0bab3a7b4 Initial idea to reconnect if needed 2025-05-27 01:25:36 +02:00
7667819687 Add Timeout/Connection closed during SSL handshake as a hostile action 2025-03-22 23:00:27 +01:00
8cb980a9b9 Add error code 400, as that seems to be a non-good one, also on http 2025-03-21 23:37:43 +01:00
a389912040 Add BADREQ with return code0, and accept anything else that is routed to https 2025-03-20 19:38:04 +01:00
7c418005ae Lessen noise:) 2025-03-20 19:03:24 +01:00
3062c1fb31 Less crashy 2025-03-20 18:50:34 +01:00
bad52cf106 Less crashy 2025-03-20 18:50:17 +01:00
ba62e87a00 Add support for haproxy logs 2025-03-20 18:49:50 +01:00
492e692137 Clean up 2024-11-10 13:31:30 +01:00
5def78ec02 Handle cases where clients try to use unsupported auth mechanisms, and cases where remote clients doesn't supply a certificate 2024-11-10 13:30:19 +01:00
5201991540 Robustify logic 2024-11-10 13:29:50 +01:00
4c3a001d46 Add flush_reject, should've been a module, but, for now, it's just a separate program 2024-10-29 20:41:30 +01:00
ac6d10a5da Add Support for opnsense alias api 2024-10-29 20:39:25 +01:00
dd8ef4e9e5 Add hostile for denied by server configuration 2024-07-08 16:16:25 +02:00
69ecca18a7 Add ignore for TLS ALPNS .* rejected 2024-04-17 15:37:03 +02:00
cbae1c859d Limit the regex to the end of line, so we don't get errors regarding PAM Authentication errors with hostnames that start with an ip:) 2024-04-10 19:21:36 +02:00
893eba3229 Change no hostname to a hostile action, there has been too many of them, and I have no idea what they are trying to do:) 2024-04-09 17:42:03 +02:00
689084d93e Add ignore for Fssh_kex_protocol_error, as it has no ip information 2024-03-25 17:36:33 +01:00
2f9024a47e Another try at this markdown-thingy... 2024-03-24 16:47:44 +01:00
092ee984ee Fix, yes 2024-03-24 16:28:51 +01:00
80a1791c41 Learn how to MD:) 2024-03-24 16:13:30 +01:00
946b47bebe ... 2024-03-24 16:10:00 +01:00
344104e6c4 Update readme with something 2024-03-24 16:01:08 +01:00
68ab6d0437 Add support for new(?) Authentication error messages from PAM. 2024-03-24 13:35:48 +01:00
b672e4274d Add broken pipe to banner exchange errors 2024-03-24 13:31:47 +01:00
c4ef60e38f Robustify parser, and chomp up messages not in [preauth] 2024-03-24 13:29:24 +01:00
3b9ab1864d Remove duplicate check (not entirely duplicate, but was catching the same thing as an earlier one) 2024-03-24 12:49:36 +01:00
f8d1c1b3e1 Add non-hostile error "Request timed out waiting for client to continue authentication" 2024-03-24 12:48:13 +01:00
8394506f4f Change banner exchange to include any of the 3 known messages. 2024-03-12 17:14:20 +01:00
03938d56e4 Add sample config file 2024-03-09 20:38:25 +01:00
08b6b503a6 All the files 2024-03-09 15:36:42 +01:00
58e88da2d8 Initial commit 2024-03-09 15:35:08 +01:00