Remove fail2ban config files

Better install them via fail2ban role
This commit is contained in:
phil 2023-10-26 22:33:49 +02:00
parent 405995863f
commit 53f2925435
4 changed files with 0 additions and 47 deletions

View file

@ -1,7 +0,0 @@
[sasl]
enabled = true
findtime = 3600
bantime = 3600
port = submission
filter = postfix-sasl
logpath = /var/log/mail-sasl.log

View file

@ -1,21 +0,0 @@
# Fail2Ban filter for postfix authentication failures
#
[INCLUDES]
before = common.conf
[Definition]
_daemon = postfix(-\w+)?/(?:submission/|smtps/)?smtp[ds]
failregex = ^%(__prefix_line)swarning: [-._\w]+\[<HOST>\]: SASL ((?i)LOGIN|PLAIN|(?:CRAM|DIGEST)-MD5) authentication failed(: [ A-Za-z0-9+/:]*={0,2})?\s*$
ignoreregex = authentication failed: Connection lost to authentication server$
[Init]
journalmatch = _SYSTEMD_UNIT=postfix.service
# Author: Yaroslav Halchenko

View file

@ -4,11 +4,6 @@
name: rsyslog
state: restarted
- name: reload fail2ban
ansible.builtin.service:
name: fail2ban
state: reloaded
- name: reload postfix
ansible.builtin.service:
name: postfix

View file

@ -1,18 +1,4 @@
---
- name: "Fail2ban | Copy jail file"
ansible.builtin.copy:
src: files/fail2ban/postfix-sasl.conf
dest: "{{ fail2ban_jail_dir }}/postfix-sasl.conf"
mode: "0644"
notify: reload fail2ban
- name: "Fail2ban | Copy SASL filter"
ansible.builtin.copy:
src: files/fail2ban/postfix-sasl.local
dest: "{{ fail2ban_filter_dir }}/postfix-sasl.local"
mode: "0644"
notify: reload fail2ban
- name: "Fail2ban | Setup SASL logging"
ansible.builtin.copy:
src: rsyslog.d/mail-sasl.conf