1 Topic by remko

  • remko
  • Member
  • Offline
  • Registered: 2020-01-11
  • Posts: 4

Topic: Fail2ban send mail update every minute

- iRedMail version (check /etc/iredmail-release): 1.6.5
- Deployed with iRedMail Easy or the downloadable installer: downloadable installer
- Linux/BSD distribution name and version: CentOS7
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): LDAP
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro?: yes 5.6

Since I manually (via iRedAdmin-Pro) unbanned 2 ip adresses from fail2banlist i get an email every minute stating these ip's are unbanned.
I cannot find any cron triggering this, and then why keep repeating this message?

Email content:

Cron ------@--------- /bin/bash /usr/local/bin/fail2ban_banned_db unban_db

Unbanned xxx.xxx.xxx.xxx from jail [postfix-pregreet].
Unbanned xxx.xxx.xxx.xxx from jail [postfix-pregreet].

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,081

Re: Fail2ban send mail update every minute

What's the output if you run command "/bin/bash /usr/local/bin/fail2ban_banned_db unban_db" manually?

It should remove unbanned IP addresses from MySQL database "fail2ban" and Fail2ban's internal SQLite database.

3 Reply by remko (edited by remko 2024-03-05 21:40:27)

  • remko
  • Member
  • Offline
  • Registered: 2020-01-11
  • Posts: 4

Re: Fail2ban send mail update every minute

[root@postbode ~]# /bin/bash /usr/local/bin/fail2ban_banned_db unban_db
Unbanned 178.32.170.18 from jail [postfix-pregreet].
Unbanned 193.222.96.32 from jail [postfix-pregreet].

The mailspam continues...

4 Reply by remko

  • remko
  • Member
  • Offline
  • Registered: 2020-01-11
  • Posts: 4

Re: Fail2ban send mail update every minute

remko wrote:

[root@postbode ~]# /bin/bash /usr/local/bin/fail2ban_banned_db unban_db
Unbanned 178.32.170.18 from jail [postfix-pregreet].
Unbanned 193.222.96.32 from jail [postfix-pregreet].

The mailspam continues...

I just checked the banlist within iRedAdmin. It seems sometimes those 2 ip's show up with status pending... When the page refreshes they are gone.

5 Reply by remko

  • remko
  • Member
  • Offline
  • Registered: 2020-01-11
  • Posts: 4

Re: Fail2ban send mail update every minute

I found the cronjob and changed it to run every hour for now...
Still can't find where it is going wrong.