Hacker News Reader

AFAIK the email alert feature is not enabled by default in fail2ban.

Is there any chance a default config of fail2ban in a typical Linux distribution would be vulnerable to this?

it would have to generate an e-mail by default, which means you need mail setup. on top of this you need to MITM the whois command (which is unencrypted, but still). This is not easily exploitable.

Reply on news.ycombinator.com