eSlider/mail-server
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(fail2ban): ignoreip docker subnet /20 (#113) #1

Merged
eSlider merged 1 commits from fix/fail2ban-ignoreip#113 into main 2026-08-25 22:01:37 +01:00
Conversation 0 Commits 1 Files Changed 1
+3 -2
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
config/fail2ban/ignoreip.conf
+3 -2
View File
@@ -1,6 +1,7 @@
# Host-originated connections reach postfix/dovecot via the docker bridge
# gateway. Without ignoring it, the postfix jail bans our own host as
# collateral of port-25 scanner noise + local TLS probes (self-DoS: host
# submission times out). Keep in sync with the compose network subnet.
# submission times out). Keep in sync with the compose network subnet
# (`docker network inspect mail-server_default`: 192.168.32.0/20, gw .32.1).
[DEFAULT]
ignoreip = 127.0.0.1/8 192.168.32.0/24 192.168.1.0/24
ignoreip = 127.0.0.1/8 192.168.32.0/20 192.168.1.0/24