Including WHOIS info in the alert email
Posted: 17 Nov 2011, 14:39
I searched for an answer to this question with no success.
I have another server running Fail2ban. When an IP is blocked, the alert email includes WHOIS information for that IP address (which usually includes the ABUSE contact). My email client parses that message and allows me to send a message to any address mentioned by just clicking on it.
This makes it very easy to forward abuse reports to other service providers, because I can click the abuse address, insert a canned message with spaces for the IP address and the log excerpt, and hit send.
The current message that I get shows the IP, the PTR and log excerpt, all it needs is the abuse address.
Is there currently some way to add it? (or should this be a feature request?)
I have another server running Fail2ban. When an IP is blocked, the alert email includes WHOIS information for that IP address (which usually includes the ABUSE contact). My email client parses that message and allows me to send a message to any address mentioned by just clicking on it.
This makes it very easy to forward abuse reports to other service providers, because I can click the abuse address, insert a canned message with spaces for the IP address and the log excerpt, and hit send.
The current message that I get shows the IP, the PTR and log excerpt, all it needs is the abuse address.
Is there currently some way to add it? (or should this be a feature request?)