Fail2Ban is Always Sending Email Message to RSPAMD GUI

aaP_marvin26camarillo

Hello. I noticed that my server load and CPU keeps on going up from time to time and it will freeze my system that will make aaPanel and all of my website impossible to connect.

When I checked Rspamd GUI website which you can see in aaPanel Mail Server Spam menu, Fail2Ban always send notification email message directly to my email server.

As you can see in the above image, it always sending me email message which RSPAMD keeps on running resulting to server overload and high cpu usage.

I want to know how to turn off or disable this email notification message so that my server load and CPU usage will go down.

aaPanel_Kern

Hello, it is recommended to check which program uses the CPU caused by
If you use the default ssh port, it is recommended that you modify the SSH port

aaP_marvin26camarillo

It is said fail2ban server is consuming server load and cpu. I also noticed pflogsumm is consuming 99% of server load.
Also, I want to know how to turn off or disable fail2ban email notification message so that my server load and CPU usage will go down.

aaPanel_Kern

Hello,
Currently, only configuration can be modified. If you modify it in the Fail2Ban interface, it will be restored to the default
/etc/fail2ban/jail.local
Modify action = %(action_mwl)s to action = %(action_)s

Restart fail2ban in the Service status

aaP_marvin26camarillo

After using action = %(action)s. The service of fail2ban wont start. Maybe wrong code.
Also, It is difficult to enable my aaPanel security firewall right now. When I enabled it, all of my aaPanel security firewale rules, data, port, ip address data are gone. Is there an aaPanel firewall backup file?

aaPanel_Kern

Currently, only configuration can be modified. If you modify it in the Fail2Ban interface, it will be restored to the default
/etc/fail2ban/jail.local
Modify action = %(action_mwl)s to action = %(action_)s

Restart fail2ban in the Service status

aaP_marvin26camarillo

aaPanel_Kern

Firewall problem, you can use ufw status to check whether the corresponding port is opened. If not, please open it manually.

aaP_marvin26camarillo

ufw status said Status: inactive
what do I do next?

Also, Fail2Ban is still sending mass email notification to my mail server after using action = %(action_)s

aaP_marvin26camarillo

after using ufw enable command in SSS secure shell, my aaPanel security firewall records are back. I saw all of my ip, port and other data which I knew it is already erase.
Now lets finish disabling fail2ban mail notification

Fail2Ban is still sending mass email notification to my mail server after using action = %(action_)s

aaPanel_Kern

aaP_marvin26camarillo
try use action = %(action_ban)s
Are there all modifications?

aaP_marvin26camarillo

I finally found the problem the reason why after I modified action = %(action_mwl)s to action = %(action_)s
It is all because the mail server stored all unsent Fail2ban email message. Now I used /etc/init.d/bt command in Secure Shell SSH. Then I selected (9) Clear panel cache and (15) Clear system rubbish to clear all of this unsent Fail2ban email message.

As of now I did not see any unsent email stored when I update Rspamd GUI website. Your solution works. Thank you very much.

Here is the solution
/etc/fail2ban/jail.local
Modify action = %(action_mwl)s to action = %(action_)s