[ossec-list] Is gmail silently dropping my OSSEC email alerts?

2019-09-27 Thread llehirgen
I am testing OSSEC HIDS in a Virtual machine on Ubuntu 18.04 server. First of all I installed and configured ssmtp as follows: root=my...@gmail.com mailhub=smtp.gmail.com:587 rewriteDomain=gmail.com hostname=localhost TLS_CA_FILE=/etc/ssl/certs/ca-certificates.crt UseTLS=Yes UseSTARTTLS

Re: [ossec-list] Is gmail silently dropping my OSSEC email alerts?

2019-09-27 Thread dan (ddp)
On Fri, Sep 27, 2019 at 10:45 AM llehirgen wrote: > > I am testing OSSEC HIDS in a Virtual machine on Ubuntu 18.04 server. > First of all I installed and configured ssmtp as follows: > > > root=my...@gmail.com > mailhub=smtp.gmail.com:587 > rewriteDomain=gmail.com > hostname=localhost > TLS_CA_FIL

Re: [ossec-list] Is gmail silently dropping my OSSEC email alerts?

2019-09-27 Thread llehirgen
On Friday, September 27, 2019 at 4:51:20 PM UTC+2, dan (ddpbsd) wrote: > > Is ssmtp listening on 127.0.0.1 port 25? > > I honestly do not know what port is ssmtp listening on. I used sudo netstat -tulpn and got 5 program names: systemd-resolve, sshd, sshd, systemd-resolve, systemd-network I co

Re: [ossec-list] Is gmail silently dropping my OSSEC email alerts?

2019-09-27 Thread dan (ddp)
On Fri, Sep 27, 2019 at 11:51 AM llehirgen wrote: > > > > On Friday, September 27, 2019 at 4:51:20 PM UTC+2, dan (ddpbsd) wrote: >> >> >> Is ssmtp listening on 127.0.0.1 port 25? >> > > I honestly do not know what port is ssmtp listening on. > I used sudo netstat -tulpn and got 5 program names: sy

Re: [ossec-list] Is gmail silently dropping my OSSEC email alerts?

2019-09-27 Thread llehirgen
> > It doesn't look like ssmtp is an actual daemon. So instead of using > '127.0.0.1' as the smtp server, you should probably use something like > '/usr/sbin/ssmtp' > I don't know what flags or anything you might need with it though, > I've never used it. > > I will try with /usr/sbin/ssmtp

Re: [ossec-list] Is gmail silently dropping my OSSEC email alerts?

2019-09-27 Thread llehirgen
I tried with /usr/sbin/ssmtp as the smtp server but nothing changed, I still am not receiving alerts -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-l