Mail::MtPolicyd::Plugin::Fail2Ban - mtpolicyd plugin to block an address with fail2ban

       Markus Benning <ich@markusbenning.de>

       This software is Copyright (c) 2014 by Markus Benning <ich@markusbenning.de>.

       This is free software, licensed under:

         The GNU General Public License, Version 2, June 1991

perl v5.38.2                                       2024-05-26             Mail::MtPolicyd::Plugin::Fail2Ban(3pm)

       This plugin can be used to block an ip with iptable thru the fail2ban daemon.

       For more information abount fail2ban read:

       http://www.fail2ban.org/

       This plugin will directly talk to the daemon thru the unix domain socket and execute an banip command:

         set <JAIL> banip <IP>

       Execute a ban on all client-ips which send a mail with a score of >=15:

         <Plugin ScoreBan>
           module = "ScoreAction"
           threshold = 15
           <Plugin ban-ip>
             module = "Fail2Ban"
             socket = "/var/run/fail2ban/fail2ban.sock"
             jail = "postfix"
           </Plugin>
         </Plugin>

       To allow mtpolicyd to access fail2ban you must make sure fail2ban can write to the fail2ban unix socket.

         chgrp mtpolicyd /var/run/fail2ban/fail2ban.sock
         chmod g+rwx /var/run/fail2ban/fail2ban.sock

       You may want to add this to the fail2ban startup script.

       You  may  want  to  use  the predefined postfix jail.  To activate it create /etc/fail2ban/jail.local and
       enable the postfix fail by setting enabled=true.

         [postfix]
         enabled = true

       Mail::MtPolicyd::Plugin::Fail2Ban - mtpolicyd plugin to block an address with fail2ban

       socket (default: /var/run/fail2ban/fail2ban.sock)
           Path to the fail2ban unix socket.

           Make sure mtpolicyd is allowed to write to this socket!

       jail (default: postfix)
           The jail in which the ip should be banned.

       version 2.05