Skip to content

Commit

Permalink
Fix invalid ports in the Debian Stretch template
Browse files Browse the repository at this point in the history
Debian stretch does not have an imap3 entry in /etc/service, but this
port is referenced in the default jail.conf configuration file.

THe problem was addressed upstream, but the fix was not rolled-out to
the Debian package:
fail2ban/fail2ban#1942

Fix this locally so that these jails do not fail to start.
  • Loading branch information
smortex committed Jul 25, 2018
1 parent 4b06124 commit ee3f76b
Showing 1 changed file with 6 additions and 6 deletions.
12 changes: 6 additions & 6 deletions templates/stretch/etc/fail2ban/jail.conf.erb
Expand Up @@ -664,15 +664,15 @@ logpath = /opt/kerio/mailserver/store/logs/security.log
[courier-auth]

enabled = <%= scope['::fail2ban::jails'].include? "courier-auth" %>
port = smtp,465,submission,imap3,imaps,pop3,pop3s
port = smtp,465,submission,imap,imaps,pop3,pop3s
logpath = %(syslog_mail)s
backend = %(syslog_backend)s


[postfix-sasl]

enabled = <%= scope['::fail2ban::jails'].include? "postfix-sasl" %>
port = smtp,465,submission,imap3,imaps,pop3,pop3s
port = smtp,465,submission,imap,imaps,pop3,pop3s
# You might consider monitoring /var/log/mail.warn instead if you are
# running postfix since it would provide the same log lines at the
# "warn" level but overall at the smaller filesize.
Expand All @@ -683,30 +683,30 @@ backend = %(postfix_backend)s
[perdition]

enabled = <%= scope['::fail2ban::jails'].include? "perdition" %>
port = imap3,imaps,pop3,pop3s
port = imap,imaps,pop3,pop3s
logpath = %(syslog_mail)s
backend = %(syslog_backend)s


[squirrelmail]

enabled = <%= scope['::fail2ban::jails'].include? "squirrelmail" %>
port = smtp,465,submission,imap2,imap3,imaps,pop3,pop3s,http,https,socks
port = smtp,465,submission,imap2,imap,imaps,pop3,pop3s,http,https,socks
logpath = /var/lib/squirrelmail/prefs/squirrelmail_access_log


[cyrus-imap]

enabled = <%= scope['::fail2ban::jails'].include? "cyrus-imap" %>
port = imap3,imaps
port = imap,imaps
logpath = %(syslog_mail)s
backend = %(syslog_backend)s


[uwimap-auth]

enabled = <%= scope['::fail2ban::jails'].include? "uwimap-auth" %>
port = imap3,imaps
port = imap,imaps
logpath = %(syslog_mail)s
backend = %(syslog_backend)s

Expand Down

0 comments on commit ee3f76b

Please sign in to comment.