On Wed, Oct 01, 2014 at 02:13:23PM -0700, Hassan Schroeder wrote: > On a fairly recent installation of Fail2Ban v0.8.14 on CentOS 6.5, > everything seems fine *except* occasionally my notification email > will include something like: > > ------------------------------------------------------------------------------------ > Here is more information about 122.225.109.121: > > [Querying whois.apnic.net] > [Unable to connect to remote host] > missing whois program
I think the "[Querying ...]" lines are being output by whois. If you look at the action you're using, you'll probably find it prints the "Here is more information" line, then calls `whois $IP`. So your whois program tries to contact whois.apnic.net and is unable to connect. I think that the "missing whois program" then basically means "missing whois SERVER". That is, your whois client couldn't find anyone to query. It might be that whois.apnic.net is busy, or you have problems reaching it (have you ever had that particular server reply to you?) > > Regards, > > Fail2Ban > ------------------------------------------------------------------------------------ > > The "missing whois program" seems like an odd message, though > it does *not* seem to interfere with banning the address (iptables). > > Anyone seen this before, or have suggestions on how to figure out > the problem? > > TIA, > -- > Hassan Schroeder ------------------------ [email protected] > http://about.me/hassanschroeder > twitter: @hassan > > ------------------------------------------------------------------------------ > Meet PCI DSS 3.0 Compliance Requirements with EventLog Analyzer > Achieve PCI DSS 3.0 Compliant Status with Out-of-the-box PCI DSS Reports > Are you Audit-Ready for PCI DSS 3.0 Compliance? Download White paper > Comply to PCI DSS 3.0 Requirement 10 and 11.5 with EventLog Analyzer > http://pubads.g.doubleclick.net/gampad/clk?id=154622311&iu=/4140/ostg.clktrk > _______________________________________________ > Fail2ban-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/fail2ban-users
signature.asc
Description: Digital signature
------------------------------------------------------------------------------ Meet PCI DSS 3.0 Compliance Requirements with EventLog Analyzer Achieve PCI DSS 3.0 Compliant Status with Out-of-the-box PCI DSS Reports Are you Audit-Ready for PCI DSS 3.0 Compliance? Download White paper Comply to PCI DSS 3.0 Requirement 10 and 11.5 with EventLog Analyzer http://pubads.g.doubleclick.net/gampad/clk?id=154622311&iu=/4140/ostg.clktrk
_______________________________________________ Fail2ban-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/fail2ban-users
