From 9c17c1c392c83e8f4b3ac1d8283eed4da3d4aac4 Mon Sep 17 00:00:00 2001
From: Silas Schöffel <sils@sils.li>
Date: Thu, 25 Apr 2024 23:28:47 +0200
Subject: feat(system/services/fail2ban): add postfix jail

This bans IP Addresses which fail to login into postfix at least 3 times in
600 seconds.
---
 system/services/fail2ban/default.nix | 6 ++++++
 1 file changed, 6 insertions(+)

(limited to 'system')

diff --git a/system/services/fail2ban/default.nix b/system/services/fail2ban/default.nix
index 66207e6..6d90d49 100644
--- a/system/services/fail2ban/default.nix
+++ b/system/services/fail2ban/default.nix
@@ -25,6 +25,12 @@
         filter = dovecot[mode=aggressive]
         maxretry = 2
       '';
+      postfix = ''
+        enabled = true
+        filter = postfix[mode=aggressive]
+        findtime = 600
+        maxretry = 3
+      '';
     };
   };
 }
-- 
cgit 1.4.1