-
-
Notifications
You must be signed in to change notification settings - Fork 288
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[Suggestion] dovecot fail2ban jail #217
Comments
Okay so the Under
Then |
Actually this seems useful enough / security-wise-important-enough that it could be a PR (reopening issue for now); the script could install fail2ban and make the corresponding couple of changes under the |
Yeah this might be worth adding since it is common enough. I'll look into it. |
Adding a todo with this on the README for now. I'll get to it when I get the chance. Doesn't seem to hard to add. |
Hey Luke,
fail2ban works great for
ssh(d)
, (alsoPasswordAuthentication no
in/etc/ssh/sshd_config
helps), but what about dovecot?When I open
/var/log/auth.log
I see tooones of entries likeApr 30 17:57:14 SAO auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=summerschool rhost=212.70.149.72
because we use password authentication to access our mail. A custom fail2ban jail may be useful. I'll have a look.
The text was updated successfully, but these errors were encountered: