[prev in list] [next in list] [prev in thread] [next in thread]
List: ossec-list
Subject: Re: [ossec-list] [v2.8.3][ossec-maild] ERROR (smtp server)
From: jbalbuenawsgsec () gmail ! com
Date: 2018-06-19 8:30:52
Message-ID: 1c24d6b1-0af5-421c-a8c0-5f12d7eadce5 () googlegroups ! com
[Download RAW message or body]
[Attachment #2 (multipart/alternative)]
I've already find out the solution!
In the file /etc/postfix/master.cf, i had to uncomment this line:
*smtp inet n - - - - smtpd*
Right now, postfix is listening at 25 and 465:
*tcp 0 0 0.0.0.0:465 0.0.0.0:*
LISTEN 26318/mastertcp 0 0 0.0.0.0:25
0.0.0.0:* LISTEN 26318/master*
Thanks.
El lunes, 18 de junio de 2018, 14:09:54 (UTC+2), dan (ddpbsd) escribió:
>
> On Thu, Jun 7, 2018 at 2:28 AM, <jbalbue...@gmail.com <javascript:>>
> wrote:
> > tcp 0 0 0.0.0.0:465 0.0.0.0:*
> LISTEN
> > 26256/master
> >
>
> Is postfix listening on 127.0.0.1 port 25?
>
> > I can send emails through postfix from the terminal; the problem is that
> > OSSEC does not send the requests to the postfix.
> >
> > El miércoles, 6 de junio de 2018, 16:37:20 (UTC+2), dan (ddpbsd)
> escribió:
> > >
> > > On Tue, May 29, 2018 at 6:07 AM, <jbalbue...@gmail.com> wrote:
> > > > It's empy.
> > > >
> > > > There are no entries at maillog.
> > > >
> > > > However, if I send a mail with sendmail (echo "Subject: sendmail
> test" |
> > > > sendmail -v xxx@xxx.xxx), at /var/log/maillog:
> > > >
> > > > May 29 12:04:30 X postfix/pickup[8183]: 638F727EA4: uid=0 from=<root>
> > > > May 29 12:04:30 X postfix/cleanup[8218]: 638F727EA4:
> > > > message-id=<20180529100430.638F727EA4@X>
> > > > May 29 12:04:30 X postfix/qmgr[8184]: 638F727EA4: from=<root@X>,
> > > > size=314,
> > > > nrcpt=1 (queue active)
> > > > May 29 12:04:33 X postfix/smtp[8220]: 638F727EA4: to=<X@X>,
> > > > relay=smtp-mail.outlook.com[40.100.175.146]:587, delay=2.7,
> > > > delays=0.02/0/2.1/0.52, dsn=2.6.0, status=sent (250 2.6.0
> > > > <20180529100430.638F727EA4@X> [InternalId=5665061863960,
> > > > Hostname=DB7P193MB0457.EURP193.PROD.OUTLOOK.COM] 3116 bytes in
> 0.347,
> > > > 8.762
> > > > KB/sec Queued mail for delivery)
> > > > May 29 12:04:33 X postfix/cleanup[8218]: 1EA9427EB9:
> > > > message-id=<20180529100433.1EA9427EB9@X>
> > > > May 29 12:04:33 X postfix/bounce[8221]: 638F727EA4: sender delivery
> > > > status
> > > > notification: 1EA9427EB9
> > > > May 29 12:04:33 X postfix/qmgr[8184]: 638F727EA4: removed
> > > >
> > > >
> > > > What's the problem with ossec?
> > > >
> > >
> > > No clue. Is postfix listening on 127.0.0.1:25?
> > >
> > > > El martes, 29 de mayo de 2018, 11:22:16 (UTC+2), dan (ddpbsd)
> escribió:
> > > > >
> > > > >
> > > > >
> > > > > On Tue, May 29, 2018, 5:06 AM <jbalbue...@gmail.com> wrote:
> > > > > >
> > > > > > Hi,
> > > > > >
> > > > > > I am receiving the error:
> > > > > >
> > > > > > 2018/05/28 17:29:54 ossec-maild(1223): ERROR: Error Sending email
> to
> > > > > > 127.0.0.1 (smtp server)
> > > > > > 2018/05/28 18:00:01 ossec-maild(1223): ERROR: Error Sending email
> to
> > > > > > 127.0.0.1 (smtp server)
> > > > > > 2018/05/28 18:22:07 ossec-maild(1223): ERROR: Error Sending email
> to
> > > > > > 127.0.0.1 (smtp server)
> > > > > >
> > > > > > Postfix is already set up and it's working on fine. (postfix's log
> is
> > > > > > empty)
> > > > > >
> > > > > > I have changed smtp_relay in my global config to localhost and
> > > > > > 127.0.0.1
> > > > > > but neither worked.
> > > > > >
> > > > > > I have changed <email_from> in my ossec config to localhost and
> > > > > > 127.0.0.1
> > > > > > but neither worked.
> > > > >
> > > > >
> > > > >
> > > > > Check your postfix logs.
> > > > >
> > > > > >
> > > > > > Thanks in advance.
> > > > > >
> > > > > > --
> > > > > >
> > > > > > ---
> > > > > > You received this message because you are subscribed to the Google
> > > > > > Groups
> > > > > > "ossec-list" group.
> > > > > > To unsubscribe from this group and stop receiving emails from it,
> send
> > > > > > an
> > > > > > email to ossec-list+...@googlegroups.com.
> > > > > > For more options, visit https://groups.google.com/d/optout.
> > > >
> > > > --
> > > >
> > > > ---
> > > > You received this message because you are subscribed to the Google
> > > > Groups
> > > > "ossec-list" group.
> > > > To unsubscribe from this group and stop receiving emails from it,
> send
> > > > an
> > > > email to ossec-list+...@googlegroups.com.
> > > > For more options, visit https://groups.google.com/d/optout.
> >
> > --
> >
> > ---
> > You received this message because you are subscribed to the Google
> Groups
> > "ossec-list" group.
> > To unsubscribe from this group and stop receiving emails from it, send
> an
> > email to ossec-list+...@googlegroups.com <javascript:>.
> > For more options, visit https://groups.google.com/d/optout.
>
--
---
You received this message because you are subscribed to the Google Groups \
"ossec-list" group. To unsubscribe from this group and stop receiving emails from it, \
send an email to ossec-list+unsubscribe@googlegroups.com. For more options, visit \
https://groups.google.com/d/optout.
[Attachment #5 (text/html)]
<div dir="ltr"><div>I've already find out the \
solution!</div><div><br></div><div>In the file /etc/postfix/master.cf, i had to \
uncomment this line:</div><div><br></div><div><i>smtp inet n \
- - - - \
smtpd</i><br></div><div><br></div><div>Right now, postfix is listening at 25 and \
465:</div><div><br></div><div><i>tcp 0 0 0.0.0.0:465 \
0.0.0.0:* LISTEN 26318/master<br>tcp \
0 0 0.0.0.0:25 0.0.0.0:* \
LISTEN 26318/master</i><br></div><div><br></div><div>Thanks.<br></div><br>El \
lunes, 18 de junio de 2018, 14:09:54 (UTC+2), dan (ddpbsd) escribió:<blockquote \
class="gmail_quote" style="margin: 0;margin-left: 0.8ex;border-left: 1px #ccc \
solid;padding-left: 1ex;">On Thu, Jun 7, 2018 at 2:28 AM, <<a href="javascript:" \
target="_blank" gdf-obfuscated-mailto="-u9H-uYtCAAJ" rel="nofollow" \
onmousedown="this.href='javascript:';return true;" \
onclick="this.href='javascript:';return true;">jbalbue...@gmail.com</a>> \
wrote: <br>> tcp 0 0 <a href="http://0.0.0.0:465" \
target="_blank" rel="nofollow" \
onmousedown="this.href='http://www.google.com/url?q\x3dhttp%3A%2F%2F0.0.0.0%3A465\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNH4tbNlXuGKxE1ZSHuwF-iyIILrxw';return \
true;" onclick="this.href='http://www.google.com/url?q\x3dhttp%3A%2F%2F0.0.0.0%3A4 \
65\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNH4tbNlXuGKxE1ZSHuwF-iyIILrxw';return \
true;">0.0.0.0:465</a> 0.0.0.0:* LISTEN \
<br>> 26256/master <br>>
<br>
<br>Is postfix listening on 127.0.0.1 port 25?
<br>
<br>> I can send emails through postfix from the terminal; the problem is that
<br>> OSSEC does not send the requests to the postfix.
<br>>
<br>> El miércoles, 6 de junio de 2018, 16:37:20 (UTC+2), dan (ddpbsd) escribió:
<br>>>
<br>>> On Tue, May 29, 2018 at 6:07 AM, <<a>jbalbue...@gmail.com</a>> \
wrote: <br>>> > It's empy.
<br>>> >
<br>>> > There are no entries at maillog.
<br>>> >
<br>>> > However, if I send a mail with sendmail (echo "Subject: \
sendmail test" | <br>>> > sendmail -v xxx@xxx.xxx), at \
/var/log/maillog: <br>>> >
<br>>> > May 29 12:04:30 X postfix/pickup[8183]: 638F727EA4: uid=0 \
from=<root> <br>>> > May 29 12:04:30 X postfix/cleanup[8218]: \
638F727EA4: <br>>> > message-id=<20180529100430.<wbr>638F727EA4@X>
<br>>> > May 29 12:04:30 X postfix/qmgr[8184]: 638F727EA4: \
from=<root@X>, <br>>> > size=314,
<br>>> > nrcpt=1 (queue active)
<br>>> > May 29 12:04:33 X postfix/smtp[8220]: 638F727EA4: to=<X@X>,
<br>>> > relay=<a href="http://smtp-mail.outlook.com" target="_blank" \
rel="nofollow" onmousedown="this.href='http://www.google.com/url?q\x3dhttp%3A%2F%2 \
Fsmtp-mail.outlook.com\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNHNmeDR0L2_gMwLQSPgZYD0Nv7CFQ';return \
true;" onclick="this.href='http://www.google.com/url?q\x3dhttp%3A%2F%2Fsmtp-mail.o \
utlook.com\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNHNmeDR0L2_gMwLQSPgZYD0Nv7CFQ';return \
true;">smtp-mail.outlook.com</a>[<wbr>40.100.175.146]:587, delay=2.7, <br>>> \
> delays=0.02/0/2.1/0.52, dsn=2.6.0, status=sent (250 2.6.0 <br>>> > \
<20180529100430.638F727EA4@X> [InternalId=5665061863960, <br>>> > \
Hostname=<a href="http://DB7P193MB0457.EURP193.PROD.OUTLOOK.COM" target="_blank" \
rel="nofollow" onmousedown="this.href='http://www.google.com/url?q\x3dhttp%3A%2F%2 \
FDB7P193MB0457.EURP193.PROD.OUTLOOK.COM\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNEIPfg1sCaZcQg9mz-Kusqs6budbw';return \
true;" onclick="this.href='http://www.google.com/url?q\x3dhttp%3A%2F%2FDB7P193MB04 \
57.EURP193.PROD.OUTLOOK.COM\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNEIPfg1sCaZcQg9mz-Kusqs6budbw';return \
true;">DB7P193MB0457.<wbr>EURP193.PROD.OUTLOOK.COM</a>] 3116 bytes in 0.347, \
<br>>> > 8.762 <br>>> > KB/sec Queued mail for delivery)
<br>>> > May 29 12:04:33 X postfix/cleanup[8218]: 1EA9427EB9:
<br>>> > message-id=<20180529100433.<wbr>1EA9427EB9@X>
<br>>> > May 29 12:04:33 X postfix/bounce[8221]: 638F727EA4: sender delivery
<br>>> > status
<br>>> > notification: 1EA9427EB9
<br>>> > May 29 12:04:33 X postfix/qmgr[8184]: 638F727EA4: removed
<br>>> >
<br>>> >
<br>>> > What's the problem with ossec?
<br>>> >
<br>>>
<br>>> No clue. Is postfix listening on <a href="http://127.0.0.1:25" \
target="_blank" rel="nofollow" \
onmousedown="this.href='http://www.google.com/url?q\x3dhttp%3A%2F%2F127.0.0.1%3A25 \
\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNHmJtVMGHigwgY2S3_q7Cy4yW2dPA';return \
true;" onclick="this.href='http://www.google.com/url?q\x3dhttp%3A%2F%2F127.0.0.1%3 \
A25\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNHmJtVMGHigwgY2S3_q7Cy4yW2dPA';return \
true;">127.0.0.1:25</a>? <br>>>
<br>>> > El martes, 29 de mayo de 2018, 11:22:16 (UTC+2), dan (ddpbsd) \
escribió: <br>>> >>
<br>>> >>
<br>>> >>
<br>>> >> On Tue, May 29, 2018, 5:06 AM \
<<a>jbalbue...@gmail.com</a>> wrote: <br>>> >>>
<br>>> >>> Hi,
<br>>> >>>
<br>>> >>> I am receiving the error:
<br>>> >>>
<br>>> >>> 2018/05/28 17:29:54 ossec-maild(1223): ERROR: Error Sending \
email to <br>>> >>> 127.0.0.1 (smtp server)
<br>>> >>> 2018/05/28 18:00:01 ossec-maild(1223): ERROR: Error Sending \
email to <br>>> >>> 127.0.0.1 (smtp server)
<br>>> >>> 2018/05/28 18:22:07 ossec-maild(1223): ERROR: Error Sending \
email to <br>>> >>> 127.0.0.1 (smtp server)
<br>>> >>>
<br>>> >>> Postfix is already set up and it's working on fine. \
(postfix's log is <br>>> >>> empty)
<br>>> >>>
<br>>> >>> I have changed smtp_relay in my global config to localhost \
and <br>>> >>> 127.0.0.1
<br>>> >>> but neither worked.
<br>>> >>>
<br>>> >>> I have changed <email_from> in my ossec config to \
localhost and <br>>> >>> 127.0.0.1
<br>>> >>> but neither worked.
<br>>> >>
<br>>> >>
<br>>> >>
<br>>> >> Check your postfix logs.
<br>>> >>
<br>>> >>>
<br>>> >>> Thanks in advance.
<br>>> >>>
<br>>> >>> --
<br>>> >>>
<br>>> >>> ---
<br>>> >>> You received this message because you are subscribed to the \
Google <br>>> >>> Groups
<br>>> >>> "ossec-list" group.
<br>>> >>> To unsubscribe from this group and stop receiving emails \
from it, send <br>>> >>> an
<br>>> >>> email to <a>ossec-list+...@googlegroups.<wbr>com</a>.
<br>>> >>> For more options, visit <a \
href="https://groups.google.com/d/optout" target="_blank" rel="nofollow" \
onmousedown="this.href='https://groups.google.com/d/optout';return true;" \
onclick="this.href='https://groups.google.com/d/optout';return \
true;">https://groups.google.com/d/<wbr>optout</a>. <br>>> >
<br>>> > --
<br>>> >
<br>>> > ---
<br>>> > You received this message because you are subscribed to the Google
<br>>> > Groups
<br>>> > "ossec-list" group.
<br>>> > To unsubscribe from this group and stop receiving emails from it, \
send <br>>> > an
<br>>> > email to <a>ossec-list+...@googlegroups.<wbr>com</a>.
<br>>> > For more options, visit <a \
href="https://groups.google.com/d/optout" target="_blank" rel="nofollow" \
onmousedown="this.href='https://groups.google.com/d/optout';return true;" \
onclick="this.href='https://groups.google.com/d/optout';return \
true;">https://groups.google.com/d/<wbr>optout</a>. <br>>
<br>> --
<br>>
<br>> ---
<br>> You received this message because you are subscribed to the Google Groups
<br>> "ossec-list" group.
<br>> To unsubscribe from this group and stop receiving emails from it, send an
<br>> email to <a href="javascript:" target="_blank" \
gdf-obfuscated-mailto="-u9H-uYtCAAJ" rel="nofollow" \
onmousedown="this.href='javascript:';return true;" \
onclick="this.href='javascript:';return \
true;">ossec-list+...@<wbr>googlegroups.com</a>. <br>> For more options, visit <a \
href="https://groups.google.com/d/optout" target="_blank" rel="nofollow" \
onmousedown="this.href='https://groups.google.com/d/optout';return true;" \
onclick="this.href='https://groups.google.com/d/optout';return \
true;">https://groups.google.com/d/<wbr>optout</a>. <br></blockquote><div \
style="display: none;"></div></div>
<p></p>
-- <br />
<br />
--- <br />
You received this message because you are subscribed to the Google Groups \
"ossec-list" group.<br /> To unsubscribe from this group and stop receiving \
emails from it, send an email to <a \
href="mailto:ossec-list+unsubscribe@googlegroups.com">ossec-list+unsubscribe@googlegroups.com</a>.<br \
/> For more options, visit <a \
href="https://groups.google.com/d/optout">https://groups.google.com/d/optout</a>.<br \
/>
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic