Current File : //etc/fail2ban/jail.d/keyhelp.conf |
# Created by KeyHelp.
#
# DO NOT CHANGE ANYTHING IN THIS FILE,
# CHANGES WILL BE LOST ON NEXT UPDATE!
# SSH
[sshd]
enabled = true
port = ssh
backend = systemd
# Web server
[kh-apache]
enabled = false
port = http,https
filter = apache-auth
logpath = /home/users/*/logs/*/error.log
maxretry = 10
# Mail server
[kh-postfix]
enabled = true
port = smtp,ssmtp,smtps,submission,submissions
filter = postfix
backend = systemd
maxretry = 6
[kh-dovecot]
enabled = true
port = pop3,pop3s,imap,imaps,submission,submissions,sieve
filter = dovecot
backend = systemd
maxretry = 10
# FTP server
[kh-ftp]
enabled = true
port = ftp,ftp-data,ftps,ftps-data
filter = proftpd
backend = systemd
maxretry = 6
# Tools
[kh-phpmyadmin]
enabled = true
port = http,https
filter = keyhelp-phpmyadmin
# https://github.com/fail2ban/fail2ban/wiki/Upgrading-to-v0.10.5-Breaks-WP-Fail2ban-and-Other-Jails
backend = systemd[journalflags=1]
maxretry = 6
[kh-roundcube]
enabled = true
port = http,https
filter = roundcube-auth
# https://github.com/fail2ban/fail2ban/wiki/Upgrading-to-v0.10.5-Breaks-WP-Fail2ban-and-Other-Jails
backend = systemd[journalflags=1]
maxretry = 10
# Misc
# !!! WARNING !!!
# Make sure that your loglevel specified in fail2ban.conf/.local
# is not at DEBUG level -- which might then cause fail2ban to fall into
# an infinite loop constantly feeding itself with non-informative lines
[kh-recidive]
enabled = false
filter = recidive
logpath = /var/log/fail2ban.log
action = iptables-allports[name=recidive]
maxretry = 5
bantime = 1w
findtime = 1d