---
name: "Mail::MtPolicyd::Plugin::Fail2Ban"
section: "3pm"
platform: "linux"
package: "mtpolicyd"
version: "2.05-1.2"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/Mail::MtPolicyd::Plugin::Fail2Ban"
---

# Mail::MtPolicyd::Plugin::Fail2Ban(3pm)

mtpolicyd plugin to block an address with fail2ban

## NAME

Mail::MtPolicyd::Plugin::Fail2Ban - mtpolicyd plugin to block an address with fail2ban

## VERSION

version 2.05

## DESCRIPTION

This plugin can be used to block an ip with iptable thru the fail2ban daemon.

For more information abount fail2ban read:

http://www.fail2ban.org/

This plugin will directly talk to the daemon thru the unix domain socket and execute an banip command:

```
  set <JAIL> banip <IP>
```

## PARAMETERS

- socket (default: /var/run/fail2ban/fail2ban.sock)

  Path to the fail2ban unix socket.

  Make sure mtpolicyd is allowed to write to this socket!

- jail (default: postfix)

  The jail in which the ip should be banned.

## EXAMPLE

Execute a ban on all client-ips which send a mail with a score of \>=15:

```
  <Plugin ScoreBan>
    module = "ScoreAction"
    threshold = 15
    <Plugin ban-ip>
      module = "Fail2Ban"
      socket = "/var/run/fail2ban/fail2ban.sock"
      jail = "postfix"
    </Plugin>
  </Plugin>
```

## FAIL2BAN CONFIGURATION

To allow mtpolicyd to access fail2ban you must make sure fail2ban can write to the fail2ban unix socket.

```
  chgrp mtpolicyd /var/run/fail2ban/fail2ban.sock
  chmod g+rwx /var/run/fail2ban/fail2ban.sock
```

You may want to add this to the fail2ban startup script.

You may want to use the predefined postfix jail. To activate it create /etc/fail2ban/jail.local and enable the postfix fail by setting enabled=true.

```
  [postfix]
  enabled = true
```

## AUTHOR

Markus Benning \<ich@markusbenning.de\>

## COPYRIGHT AND LICENSE

This software is Copyright (c) 2014 by Markus Benning \<ich@markusbenning.de\>.

This is free software, licensed under:

```
  The GNU General Public License, Version 2, June 1991
```