eSlider/mail-server
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request 'fix(fail2ban): ignoreip docker subnet /20 (#113)' (#1) from fix/fail2ban-ignoreip#113 into main

Browse Source
This commit was merged in pull request #1.
This commit is contained in:
eSlider
2026-08-25 22:01:37 +01:00
parent 7d874c5117 05540c2a8d
commit f3ea090501
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
config/fail2ban/ignoreip.conf
+3 -2
View File
@@ -1,6 +1,7 @@
# Host-originated connections reach postfix/dovecot via the docker bridge
# gateway. Without ignoring it, the postfix jail bans our own host as
# collateral of port-25 scanner noise + local TLS probes (self-DoS: host
# submission times out). Keep in sync with the compose network subnet.
# submission times out). Keep in sync with the compose network subnet
# (`docker network inspect mail-server_default`: 192.168.32.0/20, gw .32.1).
[DEFAULT]
ignoreip = 127.0.0.1/8 192.168.32.0/24 192.168.1.0/24
ignoreip = 127.0.0.1/8 192.168.32.0/20 192.168.1.0/24