doh -- thanks Darac -- I have just misread original report as if whois program was missing ;) indeed... nothing to be done on fail2ban side really (besides creating some wrapper which would loop until it succeeds)
Cheers, On Fri, 03 Oct 2014, Darac Marjal wrote: > On Wed, Oct 01, 2014 at 02:13:23PM -0700, Hassan Schroeder wrote: > > On a fairly recent installation of Fail2Ban v0.8.14 on CentOS 6.5, > > everything seems fine *except* occasionally my notification email > > will include something like: > > ------------------------------------------------------------------------------------ > > Here is more information about 122.225.109.121: > > [Querying whois.apnic.net] > > [Unable to connect to remote host] > > missing whois program > I think the "[Querying ...]" lines are being output by whois. If you > look at the action you're using, you'll probably find it prints the > "Here is more information" line, then calls `whois $IP`. So your whois > program tries to contact whois.apnic.net and is unable to connect. I > think that the "missing whois program" then basically means "missing > whois SERVER". That is, your whois client couldn't find anyone to query. > It might be that whois.apnic.net is busy, or you have problems reaching > it (have you ever had that particular server reply to you?) -- Yaroslav O. Halchenko, Ph.D. http://neuro.debian.net http://www.pymvpa.org http://www.fail2ban.org Research Scientist, Psychological and Brain Sciences Dept. Dartmouth College, 419 Moore Hall, Hinman Box 6207, Hanover, NH 03755 Phone: +1 (603) 646-9834 Fax: +1 (603) 646-1419 WWW: http://www.linkedin.com/in/yarik ------------------------------------------------------------------------------ Meet PCI DSS 3.0 Compliance Requirements with EventLog Analyzer Achieve PCI DSS 3.0 Compliant Status with Out-of-the-box PCI DSS Reports Are you Audit-Ready for PCI DSS 3.0 Compliance? Download White paper Comply to PCI DSS 3.0 Requirement 10 and 11.5 with EventLog Analyzer http://pubads.g.doubleclick.net/gampad/clk?id=154622311&iu=/4140/ostg.clktrk _______________________________________________ Fail2ban-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/fail2ban-users
