From 4d7229ccb01a506b89e240479b244a6b3faa50c6 Mon Sep 17 00:00:00 2001 From: Michael Kroes Date: Sat, 26 Mar 2016 13:37:33 +0100 Subject: [PATCH] Add documentation on why the notification was removed from the recidive jail --- conf/fail2ban/jail.local | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/conf/fail2ban/jail.local b/conf/fail2ban/jail.local index d2a12f33..cc741c80 100644 --- a/conf/fail2ban/jail.local +++ b/conf/fail2ban/jail.local @@ -28,3 +28,13 @@ maxretry = 20 enabled = true maxretry = 10 action = iptables-allports[name=recidive] +# In the recidive section of jail.conf the action contains: +# +# action = iptables-allports[name=recidive] +# sendmail-whois-lines[name=recidive, logpath=/var/log/fail2ban.log] +# +# The last line on the action will sent an email to the configured address. This mail will +# notify the administrator that someone has been repeatedly triggering one of the other jails. +# By default we don't configure this address and no action is required from the admin anyway. +# So the notification is ommited. This will prevent message appearing in the mail.log that mail +# can't be delivered to fail2ban@$HOSTNAME.