diff options
| author |   Andrew Opalach <andrew@akon.city>
| 2024-11-12 22:26:02 -0500 |
|---|---|---|
| committer | Andrew Opalach <andrew@akon.city>
| 2024-11-12 22:36:49 -0500 |
| commit | 53a0a5473f45d37027af9663638adbf56667e4ca (patch) | |
| tree | 05c6c39678a9005f95c00e0fdf31193657bd4d3d /hosts/denpa/fail2ban | |
| download | dotfiles-53a0a5473f45d37027af9663638adbf56667e4ca.tar.gz dotfiles-53a0a5473f45d37027af9663638adbf56667e4ca.tar.bz2 dotfiles-53a0a5473f45d37027af9663638adbf56667e4ca.zip | |
Hopefully no leaks
Diffstat (limited to 'hosts/denpa/fail2ban')
| -rw-r--r-- | hosts/denpa/fail2ban/fail2ban.d/denpa.local | 2 | ||||
| -rw-r--r-- | hosts/denpa/fail2ban/jail.d/denpa.local | 38 |
2 files changed, 40 insertions, 0 deletions
diff --git a/hosts/denpa/fail2ban/fail2ban.d/denpa.local b/hosts/denpa/fail2ban/fail2ban.d/denpa.local new file mode 100644 index 0000000..b3d98c4 --- /dev/null +++ b/hosts/denpa/fail2ban/fail2ban.d/denpa.local @@ -0,0 +1,2 @@ +[DEFAULT] +allowipv6 = true diff --git a/hosts/denpa/fail2ban/jail.d/denpa.local b/hosts/denpa/fail2ban/jail.d/denpa.local new file mode 100644 index 0000000..70973fe --- /dev/null +++ b/hosts/denpa/fail2ban/jail.d/denpa.local @@ -0,0 +1,38 @@ +[DEFAULT] +maxretry = 4 +findtime = 60m +bantime = 24h +backend = systemd +logtarget = SYSTEMD-JOURNAL +banaction = nftables-multiport +banaction_allports = nftables-allports +#mta = sendmail +#destemail = mark@akon.city +#action = %(action_)s +# %(mta)s-whois-matches[sender="%(sender)s", dest="%(destemail)s", chain="%(chain)s"] + +[postfix] +enabled = true +mode = aggressive +journalmatch=_SYSTEMD_UNIT=postfix@-.service + +[postfix-sasl] +enabled = true +journalmatch=_SYSTEMD_UNIT=postfix@-.service + +[sieve] +enabled = true +journalmatch=_SYSTEMD_UNIT=dovecot.service + +[dovecot] +enabled = true +journalmatch=_SYSTEMD_UNIT=dovecot.service + +[nginx-limit-req] +enabled = true +journalmatch=_SYSTEMD_UNIT=nginx.service + +[sshd] +enabled = true +mode = aggressive +journalmatch=_SYSTEMD_UNIT=ssh.service |