From 002e68cab0e4f87bd7299e837d32e8985d4380d1 Mon Sep 17 00:00:00 2001
From: David Uhden <david@uhden.dev>
Date: Tue, 28 Jan 2025 01:07:18 +0100
Subject: Make the Fail2Ban configuration work

---
 content/mail/security.md | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

(limited to 'content')

diff --git a/content/mail/security.md b/content/mail/security.md
index 76dac80..67ad079 100644
--- a/content/mail/security.md
+++ b/content/mail/security.md
@@ -42,18 +42,20 @@ Go down to the `# Mail servers` line and paste this:
     enabled  = true
     port     = smtp,ssmtp,submission
     filter   = postfix
-    logpath  = /var/log/mail.log
+    logpath = %(postfix_log)s
+    backend = systemd
 
 
     [sasl]
 
     enabled  = true
     port     = smtp,ssmtp,submission,imap2,imap3,imaps,pop3,pop3s
-    filter   = postfix-sasl
+    filter   = postfix[mode=auth]
     # You might consider monitoring /var/log/mail.warn instead if you are
     # running postfix since it would provide the same log lines at the
     # "warn" level but overall at the smaller filesize.
-    logpath  = /var/log/mail.warn
+    logpath = %(postfix_log)s
+    backend = systemd
     maxretry = 1
     bantime  = 21600
 
@@ -62,7 +64,8 @@ Go down to the `# Mail servers` line and paste this:
     enabled = true
     port    = smtp,ssmtp,submission,imap2,imap3,imaps,pop3,pop3s
     filter  = dovecot
-    logpath = /var/log/mail.log
+    logpath = %(dovecot_log)s
+    backend = systemd
 
 This will only grant 2 login attempts and then block the requester for 6 hours. Now restart `fail2ban`:
 
-- 
cgit v1.2.3