SYN flood, brute force fail2ban + session.mail.is-allowed expression (closes #482 closes #688 closes #609)

tests/src/jmap/enterprise.rs

@@ -406,9 +406,11 @@ pub async fn insert_test_metrics(core: Arc<Core>) {
             EventType::Queue(QueueEvent::QueueReport),
             EventType::MessageIngest(MessageIngestEvent::Ham),
             EventType::MessageIngest(MessageIngestEvent::Spam),
-            EventType::Auth(AuthEvent::Banned),
             EventType::Auth(AuthEvent::Failed),
-            EventType::Network(NetworkEvent::DropBlocked),
+            EventType::Security(SecurityEvent::AuthenticationBan),
+            EventType::Security(SecurityEvent::BruteForceBan),
+            EventType::Security(SecurityEvent::LoiterBan),
+            EventType::Security(SecurityEvent::IpBlocked),
             EventType::IncomingReport(IncomingReportEvent::DmarcReport),
             EventType::IncomingReport(IncomingReportEvent::DmarcReportWithWarnings),
             EventType::IncomingReport(IncomingReportEvent::TlsReport),

tests/src/jmap/mod.rs

@@ -100,8 +100,10 @@ enable = true
 implicit = false
 certificate = "default"
 
+[server.fail2ban]
+authentication = "101/5s"
+
 [authentication]
-fail2ban = "101/5s"
 rate-limit = "100/2s"
 
 [session.ehlo]