diff options
| author |   Andrew Opalach <andrew@akon.city>
| 2025-10-17 12:22:00 -0400 |
|---|---|---|
| committer | Andrew Opalach <andrew@akon.city>
| 2025-10-17 12:32:42 -0400 |
| commit | 544da1ba50d9cbf51a18ca0abf1db66b3baa7460 (patch) | |
| tree | 1caa87664ea4937c5f4e6e8dc83c49b3132ddd70 /hosts/station/fail2ban | |
| parent | 85a47287e56ba9100420246531ebea5996cc0486 (diff) | |
| download | dotfiles-544da1ba50d9cbf51a18ca0abf1db66b3baa7460.tar.gz dotfiles-544da1ba50d9cbf51a18ca0abf1db66b3baa7460.tar.bz2 dotfiles-544da1ba50d9cbf51a18ca0abf1db66b3baa7460.zip | |
Gentoo desktop
Diffstat (limited to 'hosts/station/fail2ban')
| -rw-r--r-- | hosts/station/fail2ban/fail2ban.d/station.local | 2 | ||||
| -rw-r--r-- | hosts/station/fail2ban/jail.d/station.local | 39 |
2 files changed, 41 insertions, 0 deletions
diff --git a/hosts/station/fail2ban/fail2ban.d/station.local b/hosts/station/fail2ban/fail2ban.d/station.local new file mode 100644 index 0000000..b3d98c4 --- /dev/null +++ b/hosts/station/fail2ban/fail2ban.d/station.local @@ -0,0 +1,2 @@ +[DEFAULT] +allowipv6 = true diff --git a/hosts/station/fail2ban/jail.d/station.local b/hosts/station/fail2ban/jail.d/station.local new file mode 100644 index 0000000..2110612 --- /dev/null +++ b/hosts/station/fail2ban/jail.d/station.local @@ -0,0 +1,39 @@ +[DEFAULT] +maxretry = 4 +findtime = 60m +bantime = 24h +backend = systemd +logtarget = SYSTEMD-JOURNAL +banaction = nftables-multiport +banaction_allports = nftables-allports +#mta = sendmail +#destemail = mark@akon.city +#action = %(action_)s +# %(mta)s-whois-matches[sender="%(sender)s", dest="%(destemail)s", chain="%(chain)s"] + +[postfix] +enabled = true +mode = aggressive +journalmatch=_SYSTEMD_UNIT=postfix.service + +[sieve] +enabled = true +journalmatch=_SYSTEMD_UNIT=dovecot.service + +[dovecot] +enabled = true +journalmatch=_SYSTEMD_UNIT=dovecot.service + +[dovecot-pop3imap] +enabled = true +filter = dovecot-pop3imap +journalmatch=_SYSTEMD_UNIT=dovecot.service + +[nginx-limit-req] +enabled = true +journalmatch=_SYSTEMD_UNIT=nginx.service + +[sshd] +enabled = true +mode = aggressive +journalmatch=_SYSTEMD_UNIT=ssh.service |