Summer 2014 update.

* apache.txr: restructuring of matching rules. Some new intruders listed.
  Now also checks HTTP response code to detect accesses to nonexistent pages.
  Bugfix: was not calling do-expiry.

* txrban.txr: added code at top of @(do) to easily turn off daemonization
  and redirect logging to stdout for debugging.
  (*extrainfo*): New global hash.
  (report): New optional argument to pass extra info.
  (get-info): Function to retrieve the list of extra info for an IP address.
  (clear): New function to unban an IP and completely clear its access history.
  (ban): Use new sh function instead of open-command. Use new backquote
  operator ^ instead of '.
  (process-histories): When the recent access history is empty, delete
  it from *access-hist* rather than keeping an empty list there.
  Also delete the *extrainfo* when this happens.
  (do-expiry): Use unban function for unbanning.
  (unban): New function.

* utils.txr (m): New pattern function for parsing month name.
  (self): New variable to hold the script's own name.
  (debug): Send output to *stdlog* instead of *stdout*, so
  that we now have syslog logging.

* exim.txr: New file.

* ssh.txr: New file.

* startup.sh: New file.

1 files changed, 7 insertions, 0 deletions

diff --git a/startup.sh b/startup.sh
new file mode 100755
index 0000000..a1c7bb8
--- /dev/null
+++ b/startup.sh
@@ -0,0 +1,7 @@
+#!/bin/sh
+PATH=$PATH:/usr/local/bin
+MYDIR=$(dirname "$0")
+
+txr $MYDIR/apache.txr
+txr $MYDIR/exim.txr
+txr $MYDIR/ssh.txr