Roundcube i bruteforce

Instalujemy RoundCube Fail2Ban Plugin.

Wchodzimy do katalogu z roundube.

W config/main.inc.php zmieniamy/dodajemy wpisy:

$rcmail_config[‘log_driver’] = ‘file’;
$rcmail_config[‘syslog_id’] = ’roundcube’;

Tworzymy plik: /etc/fail2ban/filter.d/roundcube.conf :

[Definition]
failregex = FAILED login for .*. from <HOST>
ignoreregex =

Dodajemy wpis do /etc/fail2ban/jail.conf

[roundcube]
enabled = true
port = http,https
filter = roundcube
action = iptables-multiport[name=roundcube, port=”http,https”]
sendmail-whois[name=Roundcube, dest=root]
logpath = /var/log/httpd/roundcube/userlogins
maxretry = 5
bantime = 1800

RoundCube Fail2Ban Plugin na naszym serwerze