ModEvasive Sending Email Alerts

[Nirjonadda]

I have installed ModEvasive on EA4. Mod is working correctly and blocks DDOS attacks. But it doesn't trigger any email. I have correctly mentioned DOSEmailNotify in .conf file. Also the log file are not shows any thing. What can be the issue ?

 

[cPanelLauren]

Hello,


When looking in /var/log/apache2/mod_evasive/ directory is there a log file present which indicates an error? Furthermore Have you read their documentation here: shivaas/mod_evasive

DOSEmailNotify
If this value is set, an email will be sent to the address specified whenever an IP address becomes blacklisted. A locking mechanism using /tmp prevents continuous emails from being sent.

NOTE: Be sure MAILER is set correctly in mod_evasive.c (or mod_evasive20.c). The default is "/bin/mail -t %s" where %s is used to denote the destination email address set in the configuration. If you are running on Linux or some other operating system with a different type of mailer, you'll need to change this.

Thank you,

 

[Nirjonadda]

When looking in /var/log/apache2/mod_evasive/ directory is there a log file present which indicates an error?

No error log in /var/log/apache2/mod_evasive/dos-IP, Only this number 26583

26583

Yes I do read this documentation but not success.

 

[cPanelLauren]

Hello,

Would it be possible for you to open a ticket for this so we can take a closer look? You can do so by clicking the link in my signature. Once the ticket is open please post the Ticket ID here so we can update this thread with the outcome.

Thank you,

 

[Nirjonadda]

Hello,

Would it be possible for you to open a ticket for this so we can take a closer look? You can do so by clicking the link in my signature. Once the ticket is open please post the Ticket ID here so we can update this thread with the outcome.

Thank you,

Done, Support Request ID is: 9443159

 

[cPanelLauren]

Thank you for that, I'll update the thread with the outcome of the ticket once more information is available.

 

[cPanelLauren]

Hello,


I just wanted to update here that our Analysts found that the setting "Prevent 'nobody' from sending mail" was on and mod_evasive would send mail as the 'nobody' user.

Can you confirm that the issue is now resolved as we weren't able to test this.

Thank you,