Ssh-iptables fail2ban jail has "sendmail" fuction in default configuration.

Refers to:

  • Plesk 12.0 for Linux

Created:

2016-11-16 12:46:32 UTC

Modified:

2016-12-21 19:11:00 UTC

0

Was this article helpful?


Have more questions?

Submit a request

Ssh-iptables fail2ban jail has "sendmail" fuction in default configuration.

Symptoms

In fresh installed Plesk 12 , there is a ssh-iptables fail2ban jail that is configured and enabled by default.

Jail configuration has a sendmail line for sending an email when a ban is made, and the email addresses in the config are invalid.

sendmail-whois[name=SSH, dest=you@example.com, sender=fail2ban@example.com, sendername="Fail2Ban"]

This causes emails to be stuck in the postfix queue.

May this default configuration be changed in one of the next Plesk MU?

Cause

This configuration related to pre-configured jail which comes with fail2ban package.
Please note that fail2ban package is installed from default yum/apt-get repository and Odin does not change default configuration.

According to our documentation :

  • Certain not Plesk-specific jails that come pre-configured in Fail2Ban may fail to activate. They need to be properly configured first.

Please note that all Plesk jails added by Odin have "plesk-" prefix in name.

Resolution

To suggest changes in default fail2ban jail configuration you can contact Fail2ban Community or suggest a feature on Plesk User Voice portal.

Have more questions? Submit a request
Please sign in to leave a comment.