Hi there,
I installed fail2ban some time ago on two servers.
Thinking it would be useful to know when someone’s trying to hack my server I
enabled it to send me emails when IP’s get banned.
That was dumb.
Turns out someone is always trying to hack my servers… so I get thousands of
emails a day now.
Not sure why I thought it would be a good idea because it’s largely useless
information.
I’m drowning in useless emails.
I’ve tried disabling email notifications in the config and failed – I can’t get
them to stop.
Here’s what I’ve tried…
In both jail.conf jail.local, I commented out the following lines:
# ban & send an e-mail with whois report to the destemail.
#action_mw = %(banaction)s[name=%(__name__)s, bantime="%(bantime)s",
port="%(port)s", protocol="%(protocol)s", chain="%(chain)s"]
%(mta)s-whois[name=%(__name__)s, dest="%(destemail)s",
protocol="%(protocol)s", chain="%(chain)s"]
# ban & send an e-mail with whois report and relevant log lines
# to the destemail.
#action_mwl = %(banaction)s[name=%(__name__)s, bantime="%(bantime)s",
port="%(port)s", protocol="%(protocol)s", chain="%(chain)s"]
%(mta)s-whois-lines[name=%(__name__)s, dest="%(destemail)s",
logpath=%(logpath)s, chain="%(chain)s"]
Then I did:
service fail2ban reload
service fail2ban restart
… but the emails keep on coming.
I’ve looked at the documentation here:
http://www.fail2ban.org/wiki/index.php/Main_Page
<http://www.fail2ban.org/wiki/index.php/Main_Page>
… but I really don’t understand how to use this documentation. I couldn’t find
anything relevant.
Please help!
Kind Regards,
Noel
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Fail2ban-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fail2ban-users
