QUESTION Fail2Ban email contents

[LesD]

I would like to look at the code that generates the F2B emails.

Does anyone know where I can find it?

I am particularly interested to know how all the WhoIs info is obtained and put into an email.

Thank you.

 

[LesD]

Thank you very much again.

I have found the appropriate section there and it contains

actionban = printf %%b "Subject: [Fail2Ban] <name>: banned <ip>
            From: Fail2Ban <<sender>>
            To: <dest>\n
            Hi,\n
            The IP <ip> has just been banned by Fail2Ban after
            <failures> attempts against <name>.\n\n
            Here are more information about <ip>:\n
            `/usr/bin/whois <ip>`\n
            Regards,\n
            Fail2Ban" | /usr/sbin/sendmail -f <sender> <dest>

So it seems that the line that does all the magic is

`/usr/bin/whois <ip>`\n

which I presume calls the 'whois' program passing it the IP which somehow pipes the data into the email.

But when I look at /usr/bin/whois in Webmin it shows whois as a 6 B 'something'

What can you code into 6 bytes? Must be some pointer somewhere else?

Just showing my ignorance about Linux I suppose

 

[LesD]

Thank you.

72k is BIG??? In Windows that is a minnow.