mailinabox/conf/fail2ban/jail.local

# Fail2Ban configuration file for Mail-in-a-Box

# JAILS

[ssh-ddos]
enabled  = true

[sasl]
enabled  = true

[dovecot]
enabled = true
filter  = dovecotimap
findtime = 30
maxretry = 20
Cleanup blank lines, comments and whitespace to make it easier to follow 2015-07-02 09:19:37 +00:00			`# Fail2Ban configuration file for Mail-in-a-Box`

Configure fail2ban jails to prevent dumb brute-force attacks against postfix, dovecot and ssh. See #319 2015-03-08 00:13:55 +00:00			`# JAILS`

			`[ssh-ddos]`
			`enabled = true`

			`[sasl]`
			`enabled = true`

			`[dovecot]`
			`enabled = true`
			`filter = dovecotimap`
Ultra safe dovecot findtime and maxretry settings Explicitly set the timings and counts for the dovecot jail rather than change the global [DEFAULT] and inherit it for this one jail. These settings are far too safe so a future PR should increase security here. 2015-07-06 12:44:53 +00:00			`findtime = 30`
			`maxretry = 20`