Article 4RA8F fail2ban email notification working

fail2ban email notification working

by
l0f4r0
from LinuxQuestions.org on (#4RA8F)
Hello,

This is about fail2ban.

Can somebody explain me the purpose and differences between the following configuration files please?
  • /etc/fail2ban/action.d/mail-buffered.conf
  • /etc/fail2ban/action.d/mail.conf
  • /etc/fail2ban/action.d/mail-whois-common.conf
  • /etc/fail2ban/action.d/mail-whois.conf
  • /etc/fail2ban/action.d/mail-whois-lines.conf
This is not clear to me and I can't really find details about them.

I'm asking because my server runs on Debian 9 with fail2ban 0.9.6-2 and I would like to customize email notifications after some IP bans.
I've modified all "actionban" sections in all 5 previously mentioned files with no avail (emails are still generic and don't take my changes into account, even after systemctl reload fail2ban command).

Thank you in advance :)

EDIT: Ok, I've not really understood why we need all these different files but I've understood their precedence order.
Thus, I've just created a /etc/fail2ban/action.d/mail-whois-lines.local file to be sure it's the last email configuration file read by fail2ban and my customization works now :)latest?d=yIl2AUoC8zA latest?i=6TM0tJzImU0:iOCm9cvXTyg:F7zBnMy latest?i=6TM0tJzImU0:iOCm9cvXTyg:V_sGLiP latest?d=qj6IDK7rITs latest?i=6TM0tJzImU0:iOCm9cvXTyg:gIN9vFw6TM0tJzImU0
External Content
Source RSS or Atom Feed
Feed Location https://feeds.feedburner.com/linuxquestions/latest
Feed Title LinuxQuestions.org
Feed Link https://www.linuxquestions.org/questions/
Reply 0 comments