fix(fail2ban): ignoreip docker subnet /20 (#113) #1
@@ -1,6 +1,7 @@
|
|||||||
# Host-originated connections reach postfix/dovecot via the docker bridge
|
# Host-originated connections reach postfix/dovecot via the docker bridge
|
||||||
# gateway. Without ignoring it, the postfix jail bans our own host as
|
# gateway. Without ignoring it, the postfix jail bans our own host as
|
||||||
# collateral of port-25 scanner noise + local TLS probes (self-DoS: host
|
# collateral of port-25 scanner noise + local TLS probes (self-DoS: host
|
||||||
# submission times out). Keep in sync with the compose network subnet.
|
# submission times out). Keep in sync with the compose network subnet
|
||||||
|
# (`docker network inspect mail-server_default`: 192.168.32.0/20, gw .32.1).
|
||||||
[DEFAULT]
|
[DEFAULT]
|
||||||
ignoreip = 127.0.0.1/8 192.168.32.0/24 192.168.1.0/24
|
ignoreip = 127.0.0.1/8 192.168.32.0/20 192.168.1.0/24
|
||||||
|
|||||||
Reference in New Issue
Block a user