[Slackbuilds-users] Fail2ban - logrotate config causes unnecessary emails

Sebastian Arcus shop at open-t.co.uk
Mon May 20 21:24:37 UTC 2013


For those of us who use email warnings with fail2ban - the current 
logrotate config file included at SBo causes unnecessary emails - as it 
restarts fail2ban weekly. When configured to send out warning emails - 
fail2ban will send a notification email for every jail configured, on 
shutdown and on startup. When managing a number of servers - each with a 
number of jails - this causes every week a good number of emails to be 
received - for not much benefit at all.

May I suggest modifying the current config to use copytruncate - so that 
fail2ban doesn't have to be restarted when rotating the log:

/var/log/fail2ban.log {
     weekly
     rotate 4
     missingok
     nocompress
     copytruncate
}


More information about the SlackBuilds-users mailing list