mirror of
https://github.com/docker-mailserver/docker-mailserver.git
synced 2025-08-04 10:05:00 +02:00
firewall: replace iptables
with nftables
(#2505)
* first adjustments to use Fail2Ban with nftables * replace `iptables` -> `nftables` and adjust tests nftables lists IPs a bit differently , so the order was adjusted for the tests to be more flexible. * line correction in mailserver.env * change from `.conf` -> `.local` and remove redundant config * revert HEREDOC to `echo` Co-authored-by: Casper <casperklein@users.noreply.github.com>
This commit is contained in:
parent
7c150402a0
commit
a9305a073f
10 changed files with 42 additions and 72 deletions
|
@ -15,10 +15,10 @@ maxretry = 3
|
|||
# can be defined using space (and/or comma) separator.
|
||||
ignoreip = 127.0.0.1/8
|
||||
|
||||
# Default ban action
|
||||
# iptables-multiport: block IP only on affected port
|
||||
# iptables-allports: block IP on all ports
|
||||
banaction = iptables-allports
|
||||
# default ban action
|
||||
# nftables-multiport: block IP only on affected port
|
||||
# nftables-allports: block IP on all ports
|
||||
banaction = nftables-allports
|
||||
|
||||
[dovecot]
|
||||
enabled = true
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue