summaryrefslogtreecommitdiffstats
path: root/roles/common/templates/etc/fail2ban
diff options
context:
space:
mode:
Diffstat (limited to 'roles/common/templates/etc/fail2ban')
-rw-r--r--roles/common/templates/etc/fail2ban/jail.local.j210
1 files changed, 10 insertions, 0 deletions
diff --git a/roles/common/templates/etc/fail2ban/jail.local.j2 b/roles/common/templates/etc/fail2ban/jail.local.j2
index b92cb7a..96f2d6b 100644
--- a/roles/common/templates/etc/fail2ban/jail.local.j2
+++ b/roles/common/templates/etc/fail2ban/jail.local.j2
@@ -44,20 +44,30 @@ maxretry = 2
enabled = true
# pam-generic filter can be customized to monitor specific subset of 'tty's
filter = pam-generic
# port actually must be irrelevant but lets leave it all for some possible uses
port = all
banaction = iptables-allports
port = anyport
logpath = /var/log/auth.log
maxretry = 6
{% if 'MX' in group_names %}
[postfix]
enabled = true
port = smtp
filter = postfix
logpath = /var/log/mail.log
maxretry = 10
{% endif %}
+
+
+{% if 'IMAP' in group_names %}
+[dovecot]
+
+enabled = true
+port = imap2,imap3,imaps,pop3,pop3s
+filter = dovecot
+logpath = /var/log/mail.log
+{% endif %}