Re: [ossec-list] ossec-maild not sending out any alerts (relaying through ssmtp)

2015-07-04 Thread theresa mic-snare
Hi Daniil,

I've already done that. The maillog doesn't show the mail being sent, but there 
isn't an error either. It seems that the ossec-maild isn't even relaying it to 
the local smtp mta (ssmtp) because as said before I can send out mails with 
mailx just fine.

The ossec.log doesn't even mention the ossec-maild even though the process is 
running...
Hmm

-- 

--- 
You received this message because you are subscribed to the Google Groups 
ossec-list group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ossec-list+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [ossec-list] ossec-maild not sending out any alerts (relaying through ssmtp)

2015-07-04 Thread theresa mic-snare
i've also tried disabling iptables, but that didn't help either...
but then again i can send out emails with mailx just find, so i don't think 
it's iptables blocking anyway...

any ideas?

Am Samstag, 4. Juli 2015 16:41:47 UTC+2 schrieb theresa mic-snare:

 Hi Daniil, 

 I've already done that. The maillog doesn't show the mail being sent, but 
 there isn't an error either. It seems that the ossec-maild isn't even 
 relaying it to the local smtp mta (ssmtp) because as said before I can send 
 out mails with mailx just fine. 

 The ossec.log doesn't even mention the ossec-maild even though the process 
 is running... 
 Hmm

-- 

--- 
You received this message because you are subscribed to the Google Groups 
ossec-list group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ossec-list+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [ossec-list] ossec-maild not sending out any alerts (relaying through ssmtp)

2015-07-04 Thread Daniil Svetlov
Hello, Theresa!

First of all check spam folder in your gmail account. Probably gmail just
in it mail from OSSEC, because they not look valid.

If you use SMTP server on localhost, check  logs of MTA. It must be in
/var/log/maillog.

пт, 3 июля 2015 г. в 19:19, theresa mic-snare rockprinz...@gmail.com:

 hi ossec'ers,


 my problem is I can't send out any emails/alert notifications with the
 ossec-maild process. I'm relaying my emails through ssmtp, the
 configuration is valid because I'm able to send out mails to external
 addresses through mailx for instance. But for some reason OSSEC just won't
 send any emails out.

 I have the following in my global ossec.conf


   global
 email_notificationyes/email_notification
 email_tox...@gmail.com/email_to
 smtp_serverlocalhost/smtp_server
 email_fromx...@gmail.com/email_from
   /global

 So by localhost or 127.0.0.1 it should use ssmtp to send out emails, right?


 Does the email_from field require to be a ossecm@realdomain? Or can this
 be a gmail address as well? So does it mean the ossecm user needs to send
 out these alerts?

 Again tests to send out emails through ssmtp via mailx have been
 successful. so I doubt it's a ssmtp issue here.

 Also what I find a little odd is that when i restart ossec through
 ossec-control all the services/processes should be restarted in a specific
 order, right? however when I look at the ossec.log in
 /var/ossec/logs/ossec.log the ossec-maild isn't mentioned at all the
 process itself runs though, when i do a ps -ef |grep ossec-maild

 my question now: how can I get the email notifcation in ossec to work?!


 thanks!

 --

 ---
 You received this message because you are subscribed to the Google Groups
 ossec-list group.
 To unsubscribe from this group and stop receiving emails from it, send an
 email to ossec-list+unsubscr...@googlegroups.com.
 For more options, visit https://groups.google.com/d/optout.

-- 

--
С уважением, Светлов Даниил.

-- 

--- 
You received this message because you are subscribed to the Google Groups 
ossec-list group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ossec-list+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.