Remove fail2ban config files
Better install them via fail2ban role
This commit is contained in:
parent
405995863f
commit
53f2925435
4 changed files with 0 additions and 47 deletions
|
@ -1,7 +0,0 @@
|
||||||
[sasl]
|
|
||||||
enabled = true
|
|
||||||
findtime = 3600
|
|
||||||
bantime = 3600
|
|
||||||
port = submission
|
|
||||||
filter = postfix-sasl
|
|
||||||
logpath = /var/log/mail-sasl.log
|
|
|
@ -1,21 +0,0 @@
|
||||||
# Fail2Ban filter for postfix authentication failures
|
|
||||||
#
|
|
||||||
|
|
||||||
[INCLUDES]
|
|
||||||
|
|
||||||
before = common.conf
|
|
||||||
|
|
||||||
[Definition]
|
|
||||||
|
|
||||||
_daemon = postfix(-\w+)?/(?:submission/|smtps/)?smtp[ds]
|
|
||||||
|
|
||||||
failregex = ^%(__prefix_line)swarning: [-._\w]+\[<HOST>\]: SASL ((?i)LOGIN|PLAIN|(?:CRAM|DIGEST)-MD5) authentication failed(: [ A-Za-z0-9+/:]*={0,2})?\s*$
|
|
||||||
|
|
||||||
ignoreregex = authentication failed: Connection lost to authentication server$
|
|
||||||
|
|
||||||
[Init]
|
|
||||||
|
|
||||||
journalmatch = _SYSTEMD_UNIT=postfix.service
|
|
||||||
|
|
||||||
|
|
||||||
# Author: Yaroslav Halchenko
|
|
|
@ -4,11 +4,6 @@
|
||||||
name: rsyslog
|
name: rsyslog
|
||||||
state: restarted
|
state: restarted
|
||||||
|
|
||||||
- name: reload fail2ban
|
|
||||||
ansible.builtin.service:
|
|
||||||
name: fail2ban
|
|
||||||
state: reloaded
|
|
||||||
|
|
||||||
- name: reload postfix
|
- name: reload postfix
|
||||||
ansible.builtin.service:
|
ansible.builtin.service:
|
||||||
name: postfix
|
name: postfix
|
||||||
|
|
|
@ -1,18 +1,4 @@
|
||||||
---
|
---
|
||||||
- name: "Fail2ban | Copy jail file"
|
|
||||||
ansible.builtin.copy:
|
|
||||||
src: files/fail2ban/postfix-sasl.conf
|
|
||||||
dest: "{{ fail2ban_jail_dir }}/postfix-sasl.conf"
|
|
||||||
mode: "0644"
|
|
||||||
notify: reload fail2ban
|
|
||||||
|
|
||||||
- name: "Fail2ban | Copy SASL filter"
|
|
||||||
ansible.builtin.copy:
|
|
||||||
src: files/fail2ban/postfix-sasl.local
|
|
||||||
dest: "{{ fail2ban_filter_dir }}/postfix-sasl.local"
|
|
||||||
mode: "0644"
|
|
||||||
notify: reload fail2ban
|
|
||||||
|
|
||||||
- name: "Fail2ban | Setup SASL logging"
|
- name: "Fail2ban | Setup SASL logging"
|
||||||
ansible.builtin.copy:
|
ansible.builtin.copy:
|
||||||
src: rsyslog.d/mail-sasl.conf
|
src: rsyslog.d/mail-sasl.conf
|
||||||
|
|
Loading…
Reference in a new issue