simplify fail2ban configuration

2021-04-28 15:57:52 +02:00 · 2021-04-28 15:57:52 +02:00 · 7368b4caea
parent f51c0934ab
commit 7368b4caea
2 changed files with 4 additions and 20 deletions
--- a/conf/fail2ban/filter.d/postfix-spamhaus.conf
+++ b/conf/fail2ban/filter.d/postfix-spamhaus.conf
@ -1,11 +0,0 @@
-# Fail2Ban filter based on spamhaus entries
-
-[INCLUDES]
-
-before = common.conf
-
-[Definition]
-
-failregex = .*?box postfix/smtpd.*?NOQUEUE: reject: RCPT from.*?\[<HOST>\]: 554 5\.7\.1 Service unavailable.*?zen\.spamhaus\.org.*$
-
-ignoreregex =
--- a/conf/fail2ban/jails.conf
+++ b/conf/fail2ban/jails.conf
@ -81,17 +81,12 @@ findtime = 7d
 [postfix]
 enabled  = true

+# postfix rbl also found by postfix jail, but postfix-rbl is more aggressive (maxretry = 1)
+[postfix-rbl]
+enabled  = true
+
 [sshd]
 enabled = true
 maxretry = 4
 bantime = 3600
 mode = aggressive
-
-[postfix-spamhaus]
-port     = smtp,465,submission
-filter   = postfix-spamhaus
-logpath  = /var/log/mail.log
-maxretry = 2
-findtime = 120m
-bantime  = 1d
-enabled  = true