Hello,
Actually I’m running freepbx 12.0.7 and have enabled the fail2ban utility from the control panel, I receive correctly the emails each time that attacker is blocked but the problem is on the email date, it show that come from 1970, I checked in the textplain or code mode of the email and not see errors in the date, show as correct, I test downloading the email, then importing again in the email and still showing from 1970, this is the header.
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from pi.empresaserver.net
by pi.empresaserver.net (Dovecot) with LMTP id pJ33MwkBm1mVJAAAUvdU4g
for <[email protected]>; Mon, 21 Aug 2017 17:49:29 +0200
Return-path: <[email protected]>
Envelope-to: [email protected]
Delivery-date: Mon, 21 Aug 2017 17:49:29 +0200
Received: from mx51.antispamcloud.com ([31.204.154.238]:52378)
by pi.empresaserver.net with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1djoxF-0002Qp-PD
for [email protected]; Mon, 21 Aug 2017 17:49:29 +0200
Received: from pbx.empresa.com ([192.168.1.108])
by mx51.antispamcloud.com with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1djoxE-0001Zh-SK
for [email protected]; Mon, 21 Aug 2017 17:49:29 +0200
Received: by pbx.empresa.com (Postfix, from userid 0)
id 70DDE21846; Mon, 21 Aug 2017 17:49:21 +0200 (CEST)
Subject: [Fail2Ban] SIP: banned 84.78.18.90 on pbx.empresa.com
Date: lun, 21 ago 2017 15:49:21 +0200
From: Fail2Ban <[email protected]>
To: [email protected]
Message-Id: <[email protected]>
Received-SPF: softfail (mx51.antispamcloud.com: transitioning domain of empresa.com does not designate 192.168.1.108 as permitted sender) client-ip=192.168.1.108; [email protected]; helo=pbx.empresa.com;
X-SPF-Result: mx51.antispamcloud.com: transitioning domain of empresa.com does not designate 192.168.1.108 as permitted sender
Authentication-Results: antispamcloud.com; spf=softfail [email protected]
X-SpamExperts-Class: whitelisted
X-SpamExperts-Evidence: recipient
X-Recommended-Action: accept
X-Filter-ID: PqwsvolAWURa0gwxuN3S5Wor9+jlOIHEL/GUFVYcxyxEDBffVZVjmVaNbG4ZJG7FZ9vqpOVucmu0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-Report-Abuse-To: [email protected]
Hi,
The IP 84.78.18.90 has just been banned by Fail2Ban after
4 attempts against SIP on pbx.empresa.com.
Regards,
Fail2Ban
For email use thunderbird, thank you advance.