mailinabox/conf/fail2ban/jail.local

# Fail2Ban configuration file for Mail-in-a-Box

# JAILS

[ssh]
enabled  = true
maxretry = 7
findtime = 120
bantime = 3600

[ssh-ddos]
enabled  = true

[sasl]
enabled  = true

[dovecot]
enabled = true
filter  = dovecotimap
findtime = 30
maxretry = 20
Cleanup blank lines, comments and whitespace to make it easier to follow 2015-07-02 09:19:37 +00:00			`# Fail2Ban configuration file for Mail-in-a-Box`

Configure fail2ban jails to prevent dumb brute-force attacks against postfix, dovecot and ssh. See #319 2015-03-08 00:13:55 +00:00			`# JAILS`

Added more bantime and lowered max retry attempts Ban time was too low for preventing ssh brute force attacks, this change also allows to keep the auth.log more clean and avoid wasting cpu and i/o on this. Bots eventually will flag your IP as secure and move along. 2015-07-02 15:55:43 +00:00			`[ssh]`
			`enabled = true`
			`maxretry = 7`
			`findtime = 120`
			`bantime = 3600`

Configure fail2ban jails to prevent dumb brute-force attacks against postfix, dovecot and ssh. See #319 2015-03-08 00:13:55 +00:00			`[ssh-ddos]`
			`enabled = true`

			`[sasl]`
			`enabled = true`

			`[dovecot]`
			`enabled = true`
			`filter = dovecotimap`
Ultra safe dovecot findtime and maxretry settings Explicitly set the timings and counts for the dovecot jail rather than change the global [DEFAULT] and inherit it for this one jail. These settings are far too safe so a future PR should increase security here. 2015-07-06 12:44:53 +00:00			`findtime = 30`
			`maxretry = 20`