2020-07-29 17:29:59 +08:00
|
|
|
# Fail2ban Instructions
|
|
|
|
|
|
|
|
|
|
This modified version of RainLoop logs to the system (when syslog works in PHP).
|
|
|
|
|
|
|
|
|
|
If you use other ports then http, https & 2096, modify them in /filter.d/*.conf
|
|
|
|
|
|
|
|
|
|
## Systemd journal PHP-FPM
|
|
|
|
|
|
|
|
|
|
Upload the following to /etc/fail2ban/*
|
|
|
|
|
|
2020-09-30 20:31:12 +08:00
|
|
|
- /filter.d/snappymail-fpm-journal.conf
|
|
|
|
|
- /jail.d/snappymail-fpm-journal.conf
|
2020-07-29 17:29:59 +08:00
|
|
|
|
|
|
|
|
Modify your /etc/fail2ban/jail.local with:
|
|
|
|
|
|
2020-09-30 20:31:12 +08:00
|
|
|
<code>[snappymail-fpm-journal]<br/>
|
2020-07-29 17:29:59 +08:00
|
|
|
enabled = true</code>
|
|
|
|
|
|
|
|
|
|
## Default log (not recommended)
|
|
|
|
|
|
|
|
|
|
Modify /PATH-TO-RAINLOOP-DATA/_data_/_default_/configs/application.ini
|
|
|
|
|
|
|
|
|
|
<code>[logs]<br/>
|
|
|
|
|
auth_logging = On<br/>
|
|
|
|
|
auth_logging_filename = "fail2ban/auth-fail.log"<br/>
|
|
|
|
|
auth_logging_format = "[{date:Y-m-d H:i:s T}] Auth failed: ip={request:ip} user={imap:login} host={imap:host} port={imap:port}"
|
|
|
|
|
</code>
|
|
|
|
|
|
2020-09-30 20:31:12 +08:00
|
|
|
Modify the path in /jail.d/snappymail-log.conf
|
2020-07-29 17:29:59 +08:00
|
|
|
|
|
|
|
|
Upload the following to /etc/fail2ban/*
|
|
|
|
|
|
2020-09-30 20:31:12 +08:00
|
|
|
- /filter.d/snappymail-log.conf
|
|
|
|
|
- /jail.d/snappymail-log.conf
|
2020-07-29 17:29:59 +08:00
|
|
|
|
|
|
|
|
Modify your /etc/fail2ban/jail.local with:
|
|
|
|
|
|
2020-09-30 20:31:12 +08:00
|
|
|
<code>[snappymail-log]<br/>
|
2020-07-29 17:29:59 +08:00
|
|
|
enabled = true</code>
|
