Ability to notify when an ip becomes banned

[urbitech]

Hi, are there any plans to implement such feature using email/telegram/....? Thank you.

[tomMoulard]

This feature is not planned as of today, but it can be implemented. Feel free to open a PR !

[jnovack]

Ehhh, I don't think it's the responsibility of the middleware to send the notification. If it writes it to the log file, then it's the responsibility of your already existing log parser and alerting mechanism to notify.

[tomMoulard]

Indeed that a good idea @jnovack. Do you know if such soft exists, a'd if so, which one can be targeted as a good replacement for the aforementioned request?

[jnovack]

You can just get VERY simple with a bash script if you get 1 or 2 a day.

#!/bin/bash

LOG_FILE="/var/log/traefik.log" # Replace with your log file path
KEYWORD="fail2ban"             # Replace with the keyword to search for
RECIPIENT_EMAIL="your_email@example.com" # Replace with recipient email
SUBJECT="Log Alert: $KEYWORD found in $LOG_FILE"

tail -f "$LOG_FILE" | grep --line-buffered "$KEYWORD" | while read -r line; do
    echo "$line" | mail -s "$SUBJECT" "$RECIPIENT_EMAIL"
done

Up from that, you can use Logwatch. Or begin your journey collecting them with rsyslog, or syslog-ng.

When you understand the flow, and mastered it locally, you'll need to collect your logs in a centralized location with a service (ELK, SigNoz, Logz.io, Graylog, Logtail) and the centralized service (either hosted locally or in the cloud) sends the notifications based on rule sets.

But sending emails on non-actionable items is an anti-pattern, because it does not scale. You get a getting a notification, that you have to do nothing. Do you want to be called at 4am with "Hey, no worries, you don't need to wake up." When you scale (from one server to two, from a small website to a larger one), the mindset needs to be shifted. Send emails on ACTIONABLE items.

And, I'll be opinionated here, email is neither a notification system nor a ticket system. If you are sending emails on actionable items, you need a ticket system so you can mark them done or in progress. Email is the scourge of productivity. It has gone the way of the phone call.