2 files changed, 13 insertions, 0 deletions
diff --git a/roles/common/templates/etc/fail2ban/jail.local.j2 b/roles/common/templates/etc/fail2ban/jail.local.j2
index 661c862..7c5bc0e 100644
--- a/roles/common/templates/etc/fail2ban/jail.local.j2
+++ b/roles/common/templates/etc/fail2ban/jail.local.j2
@@ -81,3 +81,13 @@ port     = submission
 filter   = sasl
 logpath  = /var/log/mail.warn
 {% endif %}
+
+
+{% if 'webmail' in group_names %}
+[roundcube]
+
+enabled  = true
+port     = http,https
+filter   = roundcube
+logpath  = /var/log/roundcube/errors
+{% endif %}
diff --git a/roles/common/templates/etc/iptables/services.j2 b/roles/common/templates/etc/iptables/services.j2
index 2a36932..3ddb87e 100644
--- a/roles/common/templates/etc/iptables/services.j2
+++ b/roles/common/templates/etc/iptables/services.j2
@@ -25,3 +25,6 @@ in      tcp     993                                     # IMAPS
 {% if 'MSA' in group_names %}
 in      tcp     587                                     # SMTP-AUTH
 {% endif %}
+{% if 'webmail' in group_names %}
+in     tcp      80,443                                  # HTTP/HTTPS
+{% endif %}