hi ossec'ers,


my problem is I can't send out any emails/alert notifications with the 
ossec-maild process. I'm relaying my emails through ssmtp, the 
configuration is valid because I'm able to send out mails to external 
addresses through mailx for instance. But for some reason OSSEC just won't 
send any emails out.

I have the following in my global ossec.conf


  <global>
    <email_notification>yes</email_notification>
    <email_to>x...@gmail.com</email_to>
    <smtp_server>localhost</smtp_server>
    <email_from>x...@gmail.com</email_from>
  </global>

So by localhost or 127.0.0.1 it should use ssmtp to send out emails, right?


Does the email_from field require to be a ossecm@realdomain? Or can this be 
a gmail address as well? So does it mean the ossecm user needs to send out 
these alerts?

Again tests to send out emails through ssmtp via mailx have been 
successful. so I doubt it's a ssmtp issue here.

Also what I find a little odd is that when i restart ossec through 
ossec-control all the services/processes should be restarted in a specific 
order, right? however when I look at the ossec.log in 
/var/ossec/logs/ossec.log the ossec-maild isn't mentioned at all.... the 
process itself runs though, when i do a ps -ef |grep ossec-maild

my question now: how can I get the email notifcation in ossec to work?!


thanks!

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ossec-list+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to