Including WHOIS info in the alert email

Post Reply
yakatz
Junior Member
Posts: 7
Joined: 23 Oct 2011, 01:28

Including WHOIS info in the alert email

Post by yakatz »

I searched for an answer to this question with no success.

I have another server running Fail2ban. When an IP is blocked, the alert email includes WHOIS information for that IP address (which usually includes the ABUSE contact). My email client parses that message and allows me to send a message to any address mentioned by just clicking on it.
This makes it very easy to forward abuse reports to other service providers, because I can click the abuse address, insert a canned message with spaces for the IP address and the log excerpt, and hit send.
The current message that I get shows the IP, the PTR and log excerpt, all it needs is the abuse address.

Is there currently some way to add it? (or should this be a feature request?)
chirpy
Moderator
Posts: 3537
Joined: 09 Dec 2006, 18:13

Re: Including WHOIS info in the alert email

Post by chirpy »

The only way currently would be if you wrote script using the BLOCK_REPORT feature. I'll move this to the suggestions forum for future consideration.
Post Reply