add definition of admin ipv6 address
This commit is contained in:
parent
db612e91e5
commit
212b9a31df
|
@ -5,7 +5,7 @@
|
|||
# Whitelist our own IP addresses. 127.0.0.1/8 is the default. But our status checks
|
||||
# ping services over the public interface so we should whitelist that address of
|
||||
# ours too. The string is substituted during installation.
|
||||
ignoreip = 127.0.0.1/8 PUBLIC_IP ADMIN_HOME_IP
|
||||
ignoreip = 127.0.0.1/8 PUBLIC_IP PUBLIC_IPV6 ADMIN_HOME_IP ADMIN_HOME_IPV6
|
||||
bantime = 15m
|
||||
findtime = 120m
|
||||
maxretry = 4
|
||||
|
|
|
@ -101,6 +101,7 @@ PRIVATE_IP=$PRIVATE_IP
|
|||
PRIVATE_IPV6=$PRIVATE_IPV6
|
||||
MTA_STS_MODE=${DEFAULT_MTA_STS_MODE:-enforce}
|
||||
ADMIN_HOME_IP=$ADMIN_HOME_IP
|
||||
ADMIN_HOME_IPV6=
|
||||
EOF
|
||||
|
||||
# Start service configuration.
|
||||
|
|
|
@ -349,6 +349,8 @@ rm -f /etc/fail2ban/jail.d/defaults-debian.conf # removes default config so we c
|
|||
cat conf/fail2ban/jails.conf \
|
||||
| sed "s/PUBLIC_IP/$PUBLIC_IP/g" \
|
||||
| sed "s/ADMIN_HOME_IP/$ADMIN_HOME_IP/g" \
|
||||
| sed "s/PUBLIC_IPV6/$PUBLIC_IPV6/g" \
|
||||
| sed "s/ADMIN_HOME_IPV6/$ADMIN_HOME_IPV6/g" \
|
||||
| sed "s#STORAGE_ROOT#$STORAGE_ROOT#" \
|
||||
> /etc/fail2ban/jail.d/00-mailinabox.conf
|
||||
cp -f conf/fail2ban/filter.d/* /etc/fail2ban/filter.d/
|
||||
|
|
Loading…
Reference in New Issue