Recent changes to patches

mention slackware options

tim — Sat, 25 Aug 2018 13:08:22 -0000

attached is patch to denyhosts.cfg-dist to mention the slackware options

Add Auto-Submitted header for RFC3834 conformance

Giel van Schijndel — Sat, 26 Jul 2014 18:57:59 -0000

Attached patch ensures that auto-responders (such as out-of-office/vacatation) don't reply to DenyHosts' produced mail by adding an "Auto-Submitted: auto-generated" header which indicates that automated responses are not to be sent.

#9 GeoIP information

Jesse Smith — Mon, 02 Jun 2014 18:24:02 -0000

It does not look as though the server[1] used in this patch is still operating. Can anyone provide an updated server/patch for this feature? It is an interesting feature and the code looks good, we just need a working service for DenyHosts to talk to.

[1] http://freegeoip.appspot.com/csv/

Allow to purge all entries in DENY_HOSTS with --purge-all

9MediaCenterGUI — Wed, 14 Mar 2012 14:29:37 -0000

This patch adds the --purge-all flag to allow purging of all entries in the files defined in HOSTS_DENY without regarding the PURGE_DENY delay.
As I don't have an access to the SVN or CVS repo, this patch is based on the last available table version of denyhosts.(2.6) and only impact the denyhosts.py script.

Add SYNC_PROXY_SERVER to use an http proxy to synchronize

Anonymous — Sun, 04 Dec 2011 15:27:38 -0000

Add a SYNC_PROXY_SERVER configuration option that allows you to configure an HTTP proxy for use by the XML-RPC sync request to the sync server.

fix hardcoded errno values

Pino Toscano — Wed, 14 Sep 2011 15:28:55 -0000

currently DenyHosts compares 'errno' values with hardcoded numeric values, instead of using the constants of the 'errno' Python module.
This can lead to bugs due to E* values being potentially different per-OS, and even per-arch for the same OS.

The attached patch fixes the issue.

Patch to call PLUGIN_DENY on SYNC'd hosts

Sean M. Collins — Wed, 10 Nov 2010 23:37:47 -0000

This is a patch to have PLUGIN_DENY called every time a new host is received from the sync server.

Currently in production on the following system, using a plugin to add hosts to a dedicated PF firewall table

[18:29][root@vulture.coreitpro.com ~]# pkg_info | grep deny
denyhosts-2.6_3 Script to thwart ssh attacks
[18:29][root@vulture.coreitpro.com ~]# uname -a
FreeBSD vulture.coreitpro.com 7.3-RELEASE-p2 FreeBSD 7.3-RELEASE-p2 #6 r209992: Tue Jul 13 09:21:51 EDT 2010 toor@vulture.coreitpro.com:/usr/obj/usr/src/sys/GENERIC i386

ignore "Failed none": Patch for bug 1828684

Cedric Knight — Thu, 29 Jul 2010 08:43:57 -0000

DenyHosts counts valid logins as invalid under Debian/Ubuntu at least. See bug 1828684. This simply ignores "Failed none" lines as requested. Minimal testing; presumably should be merged with patch 1940279.

GeoIP information

Koen Bollen — Wed, 07 Apr 2010 18:33:38 -0000

This patch will add the REPORT_GEOIP configuration option. This option, when set to yes, will append GeoIP information to the report mail.

Provides a useful warning when migrate switch is used

Marco Rodrigues — Fri, 19 Jun 2009 22:14:33 -0000

It's present in Debian already.