thrall: Activate fail2ban for postfix

2024-01-19 20:38:34 +01:00 · 2024-01-19 20:38:34 +01:00 · 07177629bc
commit 07177629bc
parent 2873640cbf
1 changed files with 7 additions and 0 deletions
--- a/hosts/thrall/default.nix
+++ b/hosts/thrall/default.nix
@ -324,6 +324,13 @@ in {
    maxretry = 5;
    ignoreIP =
      [ "127.0.0.0/8" "195.90.211.228/22" "10.0.0.0/8" "192.168.0.0/16" ];
+
+    jails.postfix = ''
+      filter   = postfix
+      maxretry = 3
+      action   = iptables[name=postfix, port=smtp, protocol=tcp]
+      enabled  = true
+    '';
  };

  services.syncthing = {