[FR] sharing support for fail2ban, when DMS runs in HAPROXY mode with nginx-ingress in kubernetes #3073
IvanI3
started this conversation in
Show and tell
Replies: 1 comment
-
I converted your issue into a discussion as this better fits the topic :) |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Feature Request
Not actually a FR, just sharing my simple script & config if this could be useful for someone...
Context
This is a fail2ban action and some supporting configs, which allow to use fail2ban when docker-mailserver runs in Kubernetes container behing nginx-ingress TCP proxy, using HAPROXY mode.
This setup doesn't allow to use built-in fail2ban with iptables action, because DMS container does't see real IP addresses at TCP level (DMS works in HAPROXY mode). So, one of the way to block annoying IPs - use nginx-ingress resource.
What have you done already?
Action script, configs and instructions are provided here.
Beta Was this translation helpful? Give feedback.
All reactions