Browse Source

Add rouncube-auth to fail2ban jail.conf.

Raphael Schneeberger 7 years ago
parent
commit
894a4fa44c

+ 7 - 0
install/debian/8/fail2ban/jail.local

@@ -37,3 +37,10 @@ filter  = hestia
 action  = hestia[name=HESTIA]
 logpath = /var/log/hestia/auth.log
 maxretry = 5
+
+[roundcube-auth]
+enabled  = false
+filter   = roundcube-auth
+port     = http,https
+logpath  = /var/log/roundcube/errors
+maxretry = 5

+ 7 - 0
install/debian/9/fail2ban/jail.local

@@ -37,3 +37,10 @@ filter  = hestia
 action  = hestia[name=HESTIA]
 logpath = /var/log/hestia/auth.log
 maxretry = 5
+
+[roundcube-auth]
+enabled  = false
+filter   = roundcube-auth
+port     = http,https
+logpath  = /var/log/roundcube/errors
+maxretry = 5

+ 9 - 0
install/ubuntu/14.04/fail2ban/action.d/hestia.conf

@@ -0,0 +1,9 @@
+# Fail2Ban configuration file for hestia
+
+[Definition]
+
+actionstart = /usr/local/hestia/bin/v-add-firewall-chain <name>
+actionstop = /usr/local/hestia/bin/v-delete-firewall-chain <name>
+actioncheck = iptables -n -L INPUT | grep -q 'fail2ban-<name>[ \t]'
+actionban = /usr/local/hestia/bin/v-add-firewall-ban <ip> <name>
+actionunban = /usr/local/hestia/bin/v-delete-firewall-ban <ip> <name>

+ 10 - 0
install/ubuntu/14.04/fail2ban/filter.d/hestia.conf

@@ -0,0 +1,10 @@
+# Fail2Ban filter for unsuccessful hestia authentication attempts
+#
+
+[INCLUDES]
+before = common.conf
+
+[Definition]
+failregex =  .* <HOST> failed to login
+ignoreregex =
+

+ 7 - 0
install/ubuntu/14.04/fail2ban/jail.local

@@ -37,3 +37,10 @@ filter  = hestia
 action  = hestia[name=HESTIA]
 logpath = /var/log/hestia/auth.log
 maxretry = 5
+
+[roundcube-auth]
+enabled  = false
+filter   = roundcube-auth
+port     = http,https
+logpath  = /var/log/roundcube/errors
+maxretry = 5

+ 7 - 0
install/ubuntu/16.04/fail2ban/jail.local

@@ -37,3 +37,10 @@ filter  = hestia
 action  = hestia[name=HESTIA]
 logpath = /var/log/hestia/auth.log
 maxretry = 5
+
+[roundcube-auth]
+enabled  = false
+filter   = roundcube-auth
+port     = http,https
+logpath  = /var/log/roundcube/errors
+maxretry = 5

+ 7 - 0
install/ubuntu/18.04/fail2ban/jail.local

@@ -37,3 +37,10 @@ filter  = hestia
 action  = hestia[name=HESTIA]
 logpath = /var/log/hestia/auth.log
 maxretry = 5
+
+[roundcube-auth]
+enabled  = false
+filter   = roundcube-auth
+port     = http,https
+logpath  = /var/log/roundcube/errors
+maxretry = 5