Browse Source

fail2ban added and configured for extra security

pull/260/head
Luke Smith 1 year ago
parent
commit
78ba13f03b
2 changed files with 14 additions and 2 deletions
  1. +2
    -0
      README.md
  2. +12
    -2
      emailwiz.sh

+ 2
- 0
README.md View File

@@ -25,6 +25,8 @@ give your full domain without any subdomain, i.e. `lukesmith.xyz`.
- **Spamassassin** to prevent spam and allow you to make custom filters. - **Spamassassin** to prevent spam and allow you to make custom filters.
- **OpenDKIM** to validate you so you can send to Gmail and other big sites. - **OpenDKIM** to validate you so you can send to Gmail and other big sites.
- The required SSL certificates if not already present. - The required SSL certificates if not already present.
- **fail2ban** to increase server security, with enabled modules for the above
programs.


## This script does _not_ ## This script does _not_




+ 12
- 2
emailwiz.sh View File

@@ -29,7 +29,7 @@


umask 0022 umask 0022


apt-get install -y postfix postfix-pcre dovecot-imapd dovecot-sieve opendkim spamassassin spamc net-tools
apt-get install -y postfix postfix-pcre dovecot-imapd dovecot-sieve opendkim spamassassin spamc net-tools fail2ban
# Check if OpenDKIM is installed and install it if not. # Check if OpenDKIM is installed and install it if not.
which opendkim-genkey >/dev/null 2>&1 || apt-get install opendkim-tools which opendkim-genkey >/dev/null 2>&1 || apt-get install opendkim-tools
domain="$(cat /etc/mailname)" domain="$(cat /etc/mailname)"
@@ -311,7 +311,17 @@ postconf -e 'smtpd_sender_restrictions = permit_sasl_authenticated, permit_mynet
/lib/opendkim/opendkim.service.generate /lib/opendkim/opendkim.service.generate
systemctl daemon-reload systemctl daemon-reload


for x in spamassassin opendkim dovecot postfix; do
# Enable fail2ban security for dovecot and postfix.
[ ! -f /etc/fail2ban/jail.d/emailwiz.local ] && echo "[postfix]
enabled = true
[postfix-sasl]
enabled = true
[sieve]
enabled = true
[dovecot]
enabled = true" > /etc/fail2ban/jail.d/emailwiz.local

for x in spamassassin opendkim dovecot postfix fail2ban; do
printf "Restarting %s..." "$x" printf "Restarting %s..." "$x"
service "$x" restart && printf " ...done\\n" service "$x" restart && printf " ...done\\n"
systemctl enable "$x" systemctl enable "$x"


Loading…
Cancel
Save