Przeglądaj źródła

fail2ban improvements from ioannidesalex

Serghey Rodin 8 lat temu
rodzic
commit
48c7b7f797

+ 12 - 0
install/ubuntu/12.04/fail2ban/jail.local

@@ -1,3 +1,6 @@
+[DEFAULT]
+ignoreip = 127.0.0.1/8
+
 [ssh-iptables]
 enabled  = true
 filter   = sshd
@@ -17,12 +20,14 @@ enabled = true
 filter  = exim
 action  = vesta[name=MAIL]
 logpath = /var/log/exim4/mainlog
+maxretry = 5
 
 [dovecot-iptables]
 enabled = true
 filter  = dovecot
 action  = vesta[name=MAIL]
 logpath = /var/log/dovecot.log
+maxretry = 5
 
 [mysqld-iptables]
 enabled  = false
@@ -37,3 +42,10 @@ filter  = vesta
 action  = vesta[name=VESTA]
 logpath = /var/log/vesta/auth.log
 maxretry = 5
+
+[roundcube-auth]
+enabled  = false
+filter   = roundcube-auth
+port     = http,https
+logpath  = /var/log/roundcube/errors
+maxretry = 5

+ 12 - 0
install/ubuntu/12.10/fail2ban/jail.local

@@ -1,3 +1,6 @@
+[DEFAULT]
+ignoreip = 127.0.0.1/8
+
 [ssh-iptables]
 enabled  = true
 filter   = sshd
@@ -17,12 +20,14 @@ enabled = true
 filter  = exim
 action  = vesta[name=MAIL]
 logpath = /var/log/exim4/mainlog
+maxretry = 5
 
 [dovecot-iptables]
 enabled = true
 filter  = dovecot
 action  = vesta[name=MAIL]
 logpath = /var/log/dovecot.log
+maxretry = 5
 
 [mysqld-iptables]
 enabled  = false
@@ -37,3 +42,10 @@ filter  = vesta
 action  = vesta[name=VESTA]
 logpath = /var/log/vesta/auth.log
 maxretry = 5
+
+[roundcube-auth]
+enabled  = false
+filter   = roundcube-auth
+port     = http,https
+logpath  = /var/log/roundcube/errors
+maxretry = 5

+ 12 - 0
install/ubuntu/13.04/fail2ban/jail.local

@@ -1,3 +1,6 @@
+[DEFAULT]
+ignoreip = 127.0.0.1/8
+
 [ssh-iptables]
 enabled  = true
 filter   = sshd
@@ -17,12 +20,14 @@ enabled = true
 filter  = exim
 action  = vesta[name=MAIL]
 logpath = /var/log/exim4/mainlog
+maxretry = 5
 
 [dovecot-iptables]
 enabled = true
 filter  = dovecot
 action  = vesta[name=MAIL]
 logpath = /var/log/dovecot.log
+maxretry = 5
 
 [mysqld-iptables]
 enabled  = false
@@ -37,3 +42,10 @@ filter  = vesta
 action  = vesta[name=VESTA]
 logpath = /var/log/vesta/auth.log
 maxretry = 5
+
+[roundcube-auth]
+enabled  = false
+filter   = roundcube-auth
+port     = http,https
+logpath  = /var/log/roundcube/errors
+maxretry = 5

+ 12 - 0
install/ubuntu/13.10/fail2ban/jail.local

@@ -1,3 +1,6 @@
+[DEFAULT]
+ignoreip = 127.0.0.1/8
+
 [ssh-iptables]
 enabled  = true
 filter   = sshd
@@ -17,12 +20,14 @@ enabled = true
 filter  = exim
 action  = vesta[name=MAIL]
 logpath = /var/log/exim4/mainlog
+maxretry = 5
 
 [dovecot-iptables]
 enabled = true
 filter  = dovecot
 action  = vesta[name=MAIL]
 logpath = /var/log/dovecot.log
+maxretry = 5
 
 [mysqld-iptables]
 enabled  = false
@@ -37,3 +42,10 @@ filter  = vesta
 action  = vesta[name=VESTA]
 logpath = /var/log/vesta/auth.log
 maxretry = 5
+
+[roundcube-auth]
+enabled  = false
+filter   = roundcube-auth
+port     = http,https
+logpath  = /var/log/roundcube/errors
+maxretry = 5

+ 12 - 0
install/ubuntu/14.04/fail2ban/jail.local

@@ -1,3 +1,6 @@
+[DEFAULT]
+ignoreip = 127.0.0.1/8
+
 [ssh-iptables]
 enabled  = true
 filter   = sshd
@@ -17,12 +20,14 @@ enabled = true
 filter  = exim
 action  = vesta[name=MAIL]
 logpath = /var/log/exim4/mainlog
+maxretry = 5
 
 [dovecot-iptables]
 enabled = true
 filter  = dovecot
 action  = vesta[name=MAIL]
 logpath = /var/log/dovecot.log
+maxretry = 5
 
 [mysqld-iptables]
 enabled  = false
@@ -37,3 +42,10 @@ filter  = vesta
 action  = vesta[name=VESTA]
 logpath = /var/log/vesta/auth.log
 maxretry = 5
+
+[roundcube-auth]
+enabled  = false
+filter   = roundcube-auth
+port     = http,https
+logpath  = /var/log/roundcube/errors
+maxretry = 5

+ 12 - 0
install/ubuntu/14.10/fail2ban/jail.local

@@ -1,3 +1,6 @@
+[DEFAULT]
+ignoreip = 127.0.0.1/8
+
 [ssh-iptables]
 enabled  = true
 filter   = sshd
@@ -17,12 +20,14 @@ enabled = true
 filter  = exim
 action  = vesta[name=MAIL]
 logpath = /var/log/exim4/mainlog
+maxretry = 5
 
 [dovecot-iptables]
 enabled = true
 filter  = dovecot
 action  = vesta[name=MAIL]
 logpath = /var/log/dovecot.log
+maxretry = 5
 
 [mysqld-iptables]
 enabled  = false
@@ -37,3 +42,10 @@ filter  = vesta
 action  = vesta[name=VESTA]
 logpath = /var/log/vesta/auth.log
 maxretry = 5
+
+[roundcube-auth]
+enabled  = false
+filter   = roundcube-auth
+port     = http,https
+logpath  = /var/log/roundcube/errors
+maxretry = 5

+ 12 - 0
install/ubuntu/15.04/fail2ban/jail.local

@@ -1,3 +1,6 @@
+[DEFAULT]
+ignoreip = 127.0.0.1/8
+
 [ssh-iptables]
 enabled  = true
 filter   = sshd
@@ -17,12 +20,14 @@ enabled = true
 filter  = exim
 action  = vesta[name=MAIL]
 logpath = /var/log/exim4/mainlog
+maxretry = 5
 
 [dovecot-iptables]
 enabled = true
 filter  = dovecot
 action  = vesta[name=MAIL]
 logpath = /var/log/dovecot.log
+maxretry = 5
 
 [mysqld-iptables]
 enabled  = false
@@ -37,3 +42,10 @@ filter  = vesta
 action  = vesta[name=VESTA]
 logpath = /var/log/vesta/auth.log
 maxretry = 5
+
+[roundcube-auth]
+enabled  = false
+filter   = roundcube-auth
+port     = http,https
+logpath  = /var/log/roundcube/errors
+maxretry = 5

+ 12 - 0
install/ubuntu/15.10/fail2ban/jail.local

@@ -1,3 +1,6 @@
+[DEFAULT]
+ignoreip = 127.0.0.1/8
+
 [ssh-iptables]
 enabled  = true
 filter   = sshd
@@ -17,12 +20,14 @@ enabled = true
 filter  = exim
 action  = vesta[name=MAIL]
 logpath = /var/log/exim4/mainlog
+maxretry = 5
 
 [dovecot-iptables]
 enabled = true
 filter  = dovecot
 action  = vesta[name=MAIL]
 logpath = /var/log/dovecot.log
+maxretry = 5
 
 [mysqld-iptables]
 enabled  = false
@@ -37,3 +42,10 @@ filter  = vesta
 action  = vesta[name=VESTA]
 logpath = /var/log/vesta/auth.log
 maxretry = 5
+
+[roundcube-auth]
+enabled  = false
+filter   = roundcube-auth
+port     = http,https
+logpath  = /var/log/roundcube/errors
+maxretry = 5

+ 12 - 0
install/ubuntu/16.10/fail2ban/jail.local

@@ -1,3 +1,6 @@
+[DEFAULT]
+ignoreip = 127.0.0.1/8
+
 [ssh-iptables]
 enabled  = true
 filter   = sshd
@@ -17,12 +20,14 @@ enabled = true
 filter  = exim
 action  = vesta[name=MAIL]
 logpath = /var/log/exim4/mainlog
+maxretry = 5
 
 [dovecot-iptables]
 enabled = true
 filter  = dovecot
 action  = vesta[name=MAIL]
 logpath = /var/log/dovecot.log
+maxretry = 5
 
 [mysqld-iptables]
 enabled  = false
@@ -37,3 +42,10 @@ filter  = vesta
 action  = vesta[name=VESTA]
 logpath = /var/log/vesta/auth.log
 maxretry = 5
+
+[roundcube-auth]
+enabled  = false
+filter   = roundcube-auth
+port     = http,https
+logpath  = /var/log/roundcube/errors
+maxretry = 5