E-mail mod_evasive don't work.

[spirit]

Hi,

When i test mod_evasive everything works ok (Weal thnx) but i don't recieve any email when mod_evasive blocks an IP.

I got this error in error_log:

/bin/mail: invalid option -- t

 

[nobaloney]

Don't receive an email from who/where?
/bin/mail is used by logged in senders to send mail, and perhaps by a script. It shouldn't be invoked at all when receiving email.

Jeff

 

[spirit]

I've this in my httpd.conf:

<IfModule mod_evasive.c>
DOSHashTableSize 3097
DOSPageCount 2
DOSSiteCount 50
DOSPageInterval 1
DOSSiteInterval 1
DOSBlockingPeriod 10
DOSWhitelist 127.0.0.1
DOSEmailNotify [email protected]
</IfModule>

But dont recevie any notify from mod_evasive, but only see that error.

bin/mail: invalid option -- t
Usage: mail [-iInv] [-s subject] [-c cc-addr] [-b bcc-addr] to-addr ...
[- sendmail-options ...]
mail [-iInNv] -f [name]
mail [-iInNv] [-u user]

 

[mikef1]

The mod_evasive email isn't working for me either.

Anyone find a solution?
thanks

MIke

oh and first post

 

[nobaloney]

Try reading

man mail

on your system to see if t is a valid option. If it isn't, then you'll have to either find the code in mod_evasive and fix it, or ask the mod_evasive development group.

Jeff

 

[mikef1]

I am not getting the invalid option –t error. In fact I am not getting any error messages at all that I can find.

Appears spirit is using mod_evasive for apache 1.x
I am using mod_evasive20 for apache 2.0.

In mod_evasive20.c
#define MAILER "/bin/mail %s"
Mail for me is /usr/bin/mail
Tried creating a symlink to it and changing it to /usr/bin/mail (recompiled) , neither worked for me.

Running ./test.pl I can see it working with getting 403’s about 1/3 way thru.
Tried mailing root along with an external address, I’m not seeing it even try to send.
Running FreeBSD 6.2, sending mail from the command works fine.

 

[mikef1]

Apparently the email is working.
For some reason when I run test.pl and mod-evasive throws up the 403s the email doesn't happen. But i have gotten a few emails from it early today when someone was hitting the server hard.