Package: fail2ban
Version: 0.8.4-3+squeeze1
Severity: wishlist
Tags: patch

If one doesn't have whois installed, then one gets mails of the form:

=-=-=-=-
  The IP 11.22.33.44 has just been banned by Fail2Ban after
  3 attempts against FreeSwitch.

  Here are more information about 11.22.33.44:

  Regards,

  Fail2Ban
=-=-=-=-

you could make the mail more useful bu replacing the 

  /usr/bin/whois <IP>

bit in /etc/fail2ban/action.d/sendmail-whois-lines.conf with something like 
this:

  /usr/bin/whois <IP> || echo "  [You need to install whois for this bit to 
work]"

although that will erroniously add the message if whois exists but returns
an error, so you might want to go for the more correct, but longer:

  [ -e /usr/bin/whois ] && { /usr/bin/whois <IP> ; true ; } || echo "  [You 
need to install whois for this bit to work]"

Oh, and while you're at it, that should read "here _is_ more information
about ..."  (rather than "here _are_ ...").

Cheers, Phil.

-- System Information:
Debian Release: 6.0.5
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-5-xen-686 (SMP w/1 CPU core)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages fail2ban depends on:
ii  lsb-base                3.2-23.2squeeze1 Linux Standard Base 3.2 init scrip
ii  python                  2.6.6-3+squeeze7 interactive high-level object-orie
ii  python-central          0.6.16+nmu1      register and build utility for Pyt

Versions of packages fail2ban recommends:
ii  iptables                      1.4.8-3    administration tools for packet fi
pn  whois                         <none>     (no description available)

Versions of packages fail2ban suggests:
ii  bsd-mailx [mailx]  8.1.2-0.20100314cvs-1 simple mail user agent
ii  mailx              1:20071201-3          Transitional package for mailx ren
pn  python-gamin       <none>                (no description available)

-- Configuration Files:
/etc/fail2ban/jail.conf changed [not included]

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to