1234567891011121314151617181920212223242526272829303132333435363738 |
- [DEFAULT]
- ignoreip = 127.0.0.1 {{ ansible_default_ipv4.address }} {{ ' '.join(friendly_networks) }}
- bantime = 86400
- destemail = {{ admin_email }}
- banaction = iptables-multiport
- action = %(action_)s
-
- # JAILS
- [ssh]
- enabled = true
- maxretry = 3
-
- [pam-generic]
- enabled = true
- banaction = iptables-allports
-
- [ssh-ddos]
- enabled = true
-
- [apache]
- enabled = true
-
- [postfix]
- enabled = true
- maxretry = 1
-
- [dovecot-pop3imap]
- enabled = true
- filter = dovecot-pop3imap
- action = iptables-multiport[name=dovecot-pop3imap, port="pop3,imap,993,995", protocol=tcp]
- {% if ansible_distribution == 'Ubuntu' %}
- logpath = /var/log/mail.log
- {% else %}
- logpath = /var/log/maillog
- {% endif %}
- maxretry = 20
- findtime = 1200
- bantime = 1200
|