mirrors/maddy
1
0
Fork 0
mirror of https://github.com/foxcpp/maddy.git synced 2025-04-04 05:37:34 +03:00
Code Issues Projects Releases Packages Wiki Activity

dist: Add maddy-dictonary-attack fail2ban filter and jail config

Browse source 
The exact findtime/bantime/maxtries configuration may need fine-tuning.
This commit is contained in:
fox.cpp 2019-11-19 15:30:22 +03:00
parent 61d02d5658
commit 0cc3be8457
No known key found for this signature in database
GPG key ID: E76D97CCEDE90B6C
2 changed files with 14 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

7
dist/fail2ban/filter.d/maddy-dictonary-attack.conf vendored Normal file
View file

@ -0,0 +1,7 @@
[INCLUDES]
before = common.conf
[Definition]
failregex = smtp\: MAIL FROM error repeated a lot\, possible dictonary attack\t\{\"count\"\:\d+,\"msg_id\":\".+\",\"src_ip\"\:\"<HOST>:\d+\"\}$
smtp\: too many RCPT errors\, possible dictonary attack\t\{\"msg_id\":\".+\","src_ip":"<HOST>:\d+\"\}
journalmatch = _SYSTEMD_UNIT=maddy.service + _COMM=maddy

7
dist/fail2ban/jail.d/maddy-dictonary-attack.conf vendored Normal file
View file

@ -0,0 +1,7 @@
[maddy-dictonary-attack]
port = 993,465,25
filter = maddy-dictonary-attack
bantime = 72h
maxtries = 3
findtime = 6h
backend = systemd