diff --git a/config/action.d/sendmail-geoip-lines.conf b/config/action.d/sendmail-geoip-lines.conf index 5f0a42d2..4225a3eb 100644 --- a/config/action.d/sendmail-geoip-lines.conf +++ b/config/action.d/sendmail-geoip-lines.conf @@ -14,12 +14,13 @@ before = sendmail-common.conf # Notes.: Command executed when banning an IP. Take care that the # command is executed with Fail2Ban user rights. # You need to install geoiplookup and the GeoLite or GeoIP databases. -# (geoip-bin and geoip-database-contrib in Debian) +# (geoip-bin and geoip-database in Debian) +# The host command comes from bind9-host package. # Tags: See jail.conf(5) man page # Values: CMD # actionban = printf %%b "Subject: [Fail2Ban] : banned from `uname -n` - Date: `LC_TIME=C date -u +"%%a, %%d %%h %%Y %%T +0000"` + Date: `LC_TIME=C date +"%%a, %%d %%h %%Y %%T %%z"` From: <> To: \n Hi,\n @@ -29,9 +30,9 @@ actionban = printf %%b "Subject: [Fail2Ban] : banned from `uname -n` http://bgp.he.net/ip/ http://www.projecthoneypot.org/ip_ http://whois.domaintools.com/\n\n - Country:`/usr/bin/geoiplookup -f /usr/share/GeoIP/GeoIP.dat "" | cut -d':' -f2-` - AS:`/usr/bin/geoiplookup -f /usr/share/GeoIP/GeoIPASNum.dat "" | cut -d':' -f2-` - hostname: `/usr/bin/host -t A 2>&1`\n\n + Country:`geoiplookup -f /usr/share/GeoIP/GeoIP.dat "" | cut -d':' -f2-` + AS:`geoiplookup -f /usr/share/GeoIP/GeoIPASNum.dat "" | cut -d':' -f2-` + hostname: `host -t A 2>&1`\n\n Lines containing IP: in \n `grep -E '(^|[^0-9])([^0-9]|$)' `\n\n Regards,\n