Hello group.
I just updated my fail2ban to version 0.8.13-1-nd12.04+1, running on Ubuntu
Server edition, 64-bit. I have both sendmail and postfix installed.
When I run jails using the " action = %(action_mwl)s " command, I do get
emails when something is banned (so I know my email server is good).
When I setup the "action" to use "complain" ( action = complain ) and I
have myself set to receive a CC of the mail, I never got any COMPLAIN email.
When I checked the fail2ban logs, I see this:
--------------------------------------------------------------
2015-07-02 15:31:22,926 fail2ban.actions[21250]: WARNING [jnos] Ban
178.164.241.38
2015-07-02 15:31:22,949 fail2ban.actions.action[21250]:
ERROR oifs=${IFS}; IFS=.;SEP_IP=( 178.164.241.38 ); set -- ${SEP_IP};
ADDRESSES=$(dig +short -t txt -q $4.$3.$2.$1.abuse-contacts.abusix.org);
IFS=${oifs}
IP=178.164.241.38
if [ ! -z "$ADDRESSES" ]; then
(printf %b "Dear Sir/Madam,\n\nWe have detected abuse from the IP address
$IP, which according to a abusix.com is on your network. We would
appreciate if you would investigate and take action as appropriate.\n\nLog
lines are given below, but please ask if you require any further
information.\n\n(If you are not the correct person to contact about this
please accept our apologies - your e-mail address was extracted from the
whois record by an automated process.)\n\n This mail was generated by
Fail2Ban.\nThe recipient address of this report was provided by the Abuse
Contact DB by abusix.com. abusix.com does not maintain the content of the
database. All information which we pass out, derives from the RIR databases
and is processed for ease of use. If you want to change or report non
working abuse contacts please contact the appropriate RIR. If you have any
further question, contact abusix.com directly via email ([email protected]).
Information about the Abuse Contact Database can be found here:
https://abusix.com/global-reporting/abuse-contact-db\nabusix.com is neither
responsible nor liable for the content or accuracy of this message.\n\n";
date '+Note: Local timezone is %z (%Z)'; grep -E
'(^|[^0-9])178.164.241.38([^0-9]|$)' /dev/null) | mail -s "Abuse from
178.164.241.38" -c [email protected] ${ADDRESSES//,/\" \"}
fi returned 200
-------------------------------------------------------------------
I'm not sure why the emails are not being sent.
Anyone have some suggestions?
If there are some other logs and/or date you would like me to provide,
please let me know and I'll be happy to provide.
Thanks in advance,
Wm Lewis
------------------------------------------------------------------------------
Don't Limit Your Business. Reach for the Cloud.
GigeNET's Cloud Solutions provide you with the tools and support that
you need to offload your IT needs and focus on growing your business.
Configured For All Businesses. Start Your Cloud Today.
https://www.gigenetcloud.com/
_______________________________________________
Fail2ban-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fail2ban-users
