fail2ban: setup postfix and dovecot

2023-10-19 14:24:11 +02:00 · 2023-10-19 14:24:11 +02:00 · 0712f02d40
parent c360abe7d9
commit 0712f02d40
1 changed files with 11 additions and 0 deletions
--- a/modules/fail2ban.nix
+++ b/modules/fail2ban.nix
@ -9,6 +9,17 @@
        bantime = 25h
        action = iptables-allports[name=fail2banTOR, protocol=all]
      '';
+      dovecot = ''
+        enabled = true
+        # aggressive mode to add blocking for aborted connections
+        filter = dovecot[mode=aggressive]
+        maxretry = 3
+      '';
+      postfix = ''
+        enabled = true
+        filter = postfix[mode=aggressive]
+        maxretry = 3
+      '';
    };
  };