hi ossec'ers,
my problem is I can't send out any emails/alert notifications with the
ossec-maild process. I'm relaying my emails through ssmtp, the
configuration is valid because I'm able to send out mails to external
addresses through mailx for instance. But for some reason OSSEC just won't
send any emails out.
I have the following in my global ossec.conf
<global>
<email_notification>yes</email_notification>
<email_to>x...@gmail.com</email_to>
<smtp_server>localhost</smtp_server>
<email_from>x...@gmail.com</email_from>
</global>
So by localhost or 127.0.0.1 it should use ssmtp to send out emails, right?
Does the email_from field require to be a ossecm@realdomain? Or can this be
a gmail address as well? So does it mean the ossecm user needs to send out
these alerts?
Again tests to send out emails through ssmtp via mailx have been
successful. so I doubt it's a ssmtp issue here.
Also what I find a little odd is that when i restart ossec through
ossec-control all the services/processes should be restarted in a specific
order, right? however when I look at the ossec.log in
/var/ossec/logs/ossec.log the ossec-maild isn't mentioned at all.... the
process itself runs though, when i do a ps -ef |grep ossec-maild
my question now: how can I get the email notifcation in ossec to work?!
thanks!
--
---
You received this message because you are subscribed to the Google Groups
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to ossec-list+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
