Remove fail2ban config files
Better install them via fail2ban role
This commit is contained in:
parent
405995863f
commit
53f2925435
4 changed files with 0 additions and 47 deletions
|
@ -1,7 +0,0 @@
|
|||
[sasl]
|
||||
enabled = true
|
||||
findtime = 3600
|
||||
bantime = 3600
|
||||
port = submission
|
||||
filter = postfix-sasl
|
||||
logpath = /var/log/mail-sasl.log
|
|
@ -1,21 +0,0 @@
|
|||
# Fail2Ban filter for postfix authentication failures
|
||||
#
|
||||
|
||||
[INCLUDES]
|
||||
|
||||
before = common.conf
|
||||
|
||||
[Definition]
|
||||
|
||||
_daemon = postfix(-\w+)?/(?:submission/|smtps/)?smtp[ds]
|
||||
|
||||
failregex = ^%(__prefix_line)swarning: [-._\w]+\[<HOST>\]: SASL ((?i)LOGIN|PLAIN|(?:CRAM|DIGEST)-MD5) authentication failed(: [ A-Za-z0-9+/:]*={0,2})?\s*$
|
||||
|
||||
ignoreregex = authentication failed: Connection lost to authentication server$
|
||||
|
||||
[Init]
|
||||
|
||||
journalmatch = _SYSTEMD_UNIT=postfix.service
|
||||
|
||||
|
||||
# Author: Yaroslav Halchenko
|
|
@ -4,11 +4,6 @@
|
|||
name: rsyslog
|
||||
state: restarted
|
||||
|
||||
- name: reload fail2ban
|
||||
ansible.builtin.service:
|
||||
name: fail2ban
|
||||
state: reloaded
|
||||
|
||||
- name: reload postfix
|
||||
ansible.builtin.service:
|
||||
name: postfix
|
||||
|
|
|
@ -1,18 +1,4 @@
|
|||
---
|
||||
- name: "Fail2ban | Copy jail file"
|
||||
ansible.builtin.copy:
|
||||
src: files/fail2ban/postfix-sasl.conf
|
||||
dest: "{{ fail2ban_jail_dir }}/postfix-sasl.conf"
|
||||
mode: "0644"
|
||||
notify: reload fail2ban
|
||||
|
||||
- name: "Fail2ban | Copy SASL filter"
|
||||
ansible.builtin.copy:
|
||||
src: files/fail2ban/postfix-sasl.local
|
||||
dest: "{{ fail2ban_filter_dir }}/postfix-sasl.local"
|
||||
mode: "0644"
|
||||
notify: reload fail2ban
|
||||
|
||||
- name: "Fail2ban | Setup SASL logging"
|
||||
ansible.builtin.copy:
|
||||
src: rsyslog.d/mail-sasl.conf
|
||||
|
|
Loading…
Reference in a new issue