fail2ban: add roundcube filter

4 years ago · 206e2e8a0a
4 changed files with 13 additions and 0 deletions
--- a/fail2ban/defaults/main.yml
+++ b/fail2ban/defaults/main.yml
@ -3,3 +3,4 @@ general_alert_email: "root@localhost"
 fail2ban_alert_email: Null
 fail2ban_ignore_ips: []
 fail2ban_wordpress: False
+fail2ban_roundcube: False
--- a/fail2ban/files/roundcube.conf
+++ b/fail2ban/files/roundcube.conf
@ -0,0 +1,2 @@
+[Definition]
+failregex = Login failed for .*. from <HOST>
--- a/fail2ban/tasks/main.yml
+++ b/fail2ban/tasks/main.yml
@ -32,6 +32,7 @@
    - sasl-evolix.conf
    - wordpress-soft.conf
    - wordpress-hard.conf
+    - roundcube.conf
  notify: restart fail2ban
  tags:
    - fail2ban
--- a/fail2ban/templates/jail.local.j2
+++ b/fail2ban/templates/jail.local.j2
@ -44,3 +44,12 @@ logpath = /var/log/auth.log
 maxretry = 5
 findtime = 300
 {% endif %}
+
+{% if fail2ban_roundcube %}
+[roundcube]
+enabled  = true
+port     = http,https
+filter   = roundcube
+logpath  = /var/lib/roundcube/logs/errors
+maxretry = 5
+{% endif %}