fix(fail2ban): ignoreip docker subnet /20 (#113) #1

Merged
eSlider merged 1 commits from fix/fail2ban-ignoreip#113 into main 2026-08-25 22:01:37 +01:00
+3 -2
View File
@@ -1,6 +1,7 @@
# Host-originated connections reach postfix/dovecot via the docker bridge # Host-originated connections reach postfix/dovecot via the docker bridge
# gateway. Without ignoring it, the postfix jail bans our own host as # gateway. Without ignoring it, the postfix jail bans our own host as
# collateral of port-25 scanner noise + local TLS probes (self-DoS: host # collateral of port-25 scanner noise + local TLS probes (self-DoS: host
# submission times out). Keep in sync with the compose network subnet. # submission times out). Keep in sync with the compose network subnet
# (`docker network inspect mail-server_default`: 192.168.32.0/20, gw .32.1).
[DEFAULT] [DEFAULT]
ignoreip = 127.0.0.1/8 192.168.32.0/24 192.168.1.0/24 ignoreip = 127.0.0.1/8 192.168.32.0/20 192.168.1.0/24