Intrusion detection notifications

Help for FreePBX
1

Is it possible to change/set/remove the email for the intrusion detection notification via the command line with fwconsole?

2

Not with fwconsole no. The fwconsole command is all freepbx, and the only fpbx module that writes config for fail2ban is the sysadmin module which is not supported on Tango.

3

@lgaetz I’m sorry, I should have been more specific, this is for FreePBX Distro 16. Not TangoPBX.

4

Probably not fwconsole, but it’s likely in the MySQL database somewhere that you could remove and then run an fwconsole reload after

5

The email is set in the jail.local, you can use grep -r “your@emailadress” /etc/fail2ban/

you can change the email using sudo sed -i ‘s/dest=old@email_address/dest=new@email_address/g’ /etc/fail2ban/jail.local

and then sudo systemctl restart fail2ban

this does not update the email in GUI and if you save and restart in the GUI it will revert the email back to what is set in the webgui :slight_smile: