dist: Update fail2ban filters

filter.d/maddy.conf was using old message format.

Additionally, jail.d/maddy.conf now specifies backend = systemd which
matches the standard configuration with maddy logging to
systemd-journald.
This commit is contained in:
fox.cpp 2019-11-19 01:24:51 +03:00
parent 3c9db87411
commit ca2ccae4e0
No known key found for this signature in database
GPG key ID: E76D97CCEDE90B6C
4 changed files with 11 additions and 7 deletions

View file

@ -1,2 +0,0 @@
[Definition]
failregex = authentication failed \(username="(.+)"; src_ip="<HOST>:[0-9]+"\)

6
dist/fail2ban/filter.d/maddy.conf vendored Normal file
View file

@ -0,0 +1,6 @@
[INCLUDES]
before = common.conf
[Definition]
failregex = (smtp|submission|lmtp|imap):\ authentication failed\t\{\"src_ip\"\:\"<HOST>:\d+\"\,\"username\"\:\".*\"\}$
journalmatch = _SYSTEMD_UNIT=maddy.service + _COMM=maddy

View file

@ -1,5 +0,0 @@
[maddy]
enabled = true
port = 143,993,587,465,25
filter = maddy
logpath = /var/log/maddy/maddy.log

5
dist/fail2ban/jail.d/maddy.conf vendored Normal file
View file

@ -0,0 +1,5 @@
[maddy]
enabled = true
port = 993,465,25
filter = maddy
backend = systemd