ModEvasive Sending Email Alerts

Nirjonadda

• April 16, 2018 07:40

I have installed ModEvasive on EA4. Mod is working correctly and blocks DDOS attacks. But it doesn't trigger any email. I have correctly mentioned DOSEmailNotify in .conf file. Also the log file are not shows any thing. What can be the issue ?

• 

  cPanelLauren

  • April 16, 2018 16:44

  Hello, When looking in /var/log/apache2/mod_evasive/ directory is there a log file present which indicates an error? Furthermore Have you read their documentation here: shivaas/mod_evasive [QUOTE] DOSEmailNotify If this value is set, an email will be sent to the address specified whenever an IP address becomes blacklisted. A locking mechanism using /tmp prevents continuous emails from being sent. NOTE: Be sure MAILER is set correctly in mod_evasive.c (or mod_evasive20.c). The default is "/bin/mail -t %s" where %s is used to denote the destination email address set in the configuration. If you are running on Linux or some other operating system with a different type of mailer, you'll need to change this.
  Thank you,

  0
• 

  Nirjonadda

  • April 16, 2018 16:51

  When looking in /var/log/apache2/mod_evasive/ directory is there a log file present which indicates an error?

  
  No error log in /var/log/apache2/mod_evasive/dos-IP, Only this number 26583 26583
  Yes I do read this documentation but not success.

  0
• 

  cPanelLauren

  • April 16, 2018 16:57

  Hello, Would it be possible for you to open a ticket for this so we can take a closer look? You can do so by clicking the link in my signature. Once the ticket is open please post the Ticket ID here so we can update this thread with the outcome. Thank you,

  0
• 

  Nirjonadda

  • April 16, 2018 17:43

  Hello, Would it be possible for you to open a ticket for this so we can take a closer look? You can do so by clicking the link in my signature. Once the ticket is open please post the Ticket ID here so we can update this thread with the outcome. Thank you,

  
  Done, Support Request ID is: 9443159

  0
• 

  cPanelLauren

  • April 16, 2018 17:55

  Thank you for that, I'll update the thread with the outcome of the ticket once more information is available.

  0
• 

  cPanelLauren

  • April 17, 2018 15:41

  Hello, I just wanted to update here that our Analysts found that the setting "Prevent 'nobody' from sending mail" was on and mod_evasive would send mail as the 'nobody' user. Can you confirm that the issue is now resolved as we weren't able to test this. Thank you,

  0

Please sign in to leave a comment.