3 ms·
AFAIK the email alert feature is not enabled by default in fail2ban. Is there any chance a default config of fail2ban in a typical Linux distribution would be
by patchtopic 5y ago
AFAIK the email alert feature is not enabled by default in fail2ban.
Is there any chance a default config of fail2ban in a typical Linux distribution would be vulnerable to this?
- flatiron 5y agoit would have to generate an e-mail by default, which means you need mail setup. on top of this you need to MITM the whois command (which is unencrypted, but still). This is not easily exploitable.