[prev in list] [next in list] [prev in thread] [next in thread]
List: ossec-list
Subject: Re: [ossec-list] not receiving alerts on email.
From: Stefan Fuhrmann <stefan () fuhrmann ! homedns ! org>
Date: 2020-06-19 13:54:13
Message-ID: 4d9c5791-1333-c39a-7e7f-15946d60f389 () fuhrmann ! homedns ! org
[Download RAW message or body]
Ahoi,
your mail relay need authentication?
Can you
telnet mailstore1.secureserver.net 25
from ossec machine to the mail relay?
Stefan
Am 19.06.20 um 13:30 schrieb siddharth jha:
> yes i hv selected smtp as localhost.and using sendmail to do this
> process.
> and getting msg in maillog
>
> Jun 19 16:25:42 OssecVM sm-mta[25838]: 05GCIXFs019057:
> to=<name@domain.co.in>, ctladdr=<root@localhost> (0/0),
> delay=2+22:37:09, xdelay=00:00:00, mailer=esm$$er=esmtp, pri=38460588,
> relay=mailstore1.secureserver.net., dsn=4.0.0, stat=Deferred$er=esmtp,
> pri=38460588, relay=mailstore1.secureserver.net., dsn=4.0.0, stat=Deferred
>
> can you suggest something?
> Thank You
>
>
>
> On Wednesday, June 17, 2020 at 5:53:42 PM UTC+5:30, dan (ddpbsd) wrote:
>
> On Tue, Jun 16, 2020 at 7:21 AM siddharth jha <siddha...@gmail.com
> <javascript:>> wrote:
> >
> > Hi,
> >
> > I'm new in ossec and recently install OSSEC 3.6.0 on Ubuntu
> 18.04.04 server successfully.
> > also add some win. agent and i can see alerts on ossec web-ui
> but i'm not receiving any alerts on email.
> > need suggestion how should i configure alerts to get same over
> the email also .
> > Thanks
> >
>
> Did you configure the smtp server in /var/ossec/etc/ossec.conf?
> Do you see any errors in your smtp server's logs (often
> /var/log/maillog)?
>
> > --
> >
> > ---
> > You received this message because you are subscribed to the
> Google Groups "ossec-list" group.
> > To unsubscribe from this group and stop receiving emails from
> it, send an email to ossec...@googlegroups.com <javascript:>.
> > To view this discussion on the web visit
> https://groups.google.com/d/msgid/ossec-list/a9ff0723-17c0-4707-b53d-df1f0d4b96fbo%40googlegroups.com
> <https://groups.google.com/d/msgid/ossec-list/a9ff0723-17c0-4707-b53d-df1f0d4b96fbo%40googlegroups.com>.
>
>
> --
>
> ---
> You received this message because you are subscribed to the Google
> Groups "ossec-list" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to ossec-list+unsubscribe@googlegroups.com
> <mailto:ossec-list+unsubscribe@googlegroups.com>.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/ossec-list/42dad815-132e-49d5-b159-aae10e48775eo%40googlegroups.com \
> <https://groups.google.com/d/msgid/ossec-list/42dad815-132e-49d5-b159-aae10e48775eo%40googlegroups.com?utm_medium=email&utm_source=footer>.
>
--
---
You received this message because you are subscribed to the Google Groups \
"ossec-list" group. To unsubscribe from this group and stop receiving emails from it, \
send an email to ossec-list+unsubscribe@googlegroups.com. To view this discussion on \
the web visit https://groups.google.com/d/msgid/ossec-list/4d9c5791-1333-c39a-7e7f-15946d60f389%40fuhrmann.homedns.org.
[Attachment #3 (text/html)]
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Ahoi,</p>
<p>your mail relay need authentication?</p>
<p>Can you <br>
</p>
<p>telnet mailstore1.secureserver.net 25</p>
<p>from ossec machine to the mail relay?<br>
</p>
<p><br>
</p>
<p>Stefan<br>
</p>
<p><br>
</p>
<p><br>
</p>
<div class="moz-cite-prefix">Am 19.06.20 um 13:30 schrieb siddharth
jha:<br>
</div>
<blockquote type="cite"
cite="mid:42dad815-132e-49d5-b159-aae10e48775eo@googlegroups.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div dir="ltr">yes i hv selected smtp as localhost.and using
sendmail to do this process.
<div>and getting msg in maillog</div>
<div><br>
</div>
<div>
<div>Jun 19 16:25:42 OssecVM sm-mta[25838]: 05GCIXFs019057:
to=<a class="moz-txt-link-rfc2396E" \
href="mailto:name@domain.co.in"><name@domain.co.in></a>, \
ctladdr=<root@localhost> (0/0), delay=2+22:37:09, xdelay=00:00:00,
mailer=esm$$er=esmtp, pri=38460588,
relay=mailstore1.secureserver.net., dsn=4.0.0,
stat=Deferred$er=esmtp, pri=38460588,
relay=mailstore1.secureserver.net., dsn=4.0.0, stat=Deferred</div>
<div><br>
</div>
<div>can you suggest something?</div>
<div>Thank You</div>
<div><br>
<div><br>
<br>
On Wednesday, June 17, 2020 at 5:53:42 PM UTC+5:30, dan
(ddpbsd) wrote:
<blockquote class="gmail_quote" style="margin:
0;margin-left: 0.8ex;border-left: 1px #ccc
solid;padding-left: 1ex;">On Tue, Jun 16, 2020 at 7:21
AM siddharth jha <<a href="javascript:"
target="_blank" gdf-obfuscated-mailto="7bk2wbg1BwAJ"
rel="nofollow"
onmousedown="this.href='javascript:';return true;"
onclick="this.href='javascript:';return true;"
moz-do-not-send="true">siddha...@gmail.com</a>>
wrote:
<br>
>
<br>
> Hi,
<br>
>
<br>
> I'm new in ossec and recently install OSSEC 3.6.0
on Ubuntu 18.04.04 server successfully.
<br>
> also add some win. agent and i can see alerts on
ossec web-ui but i'm not receiving any alerts on email.
<br>
> need suggestion how should i configure alerts to
get same over the email also .
<br>
> Thanks
<br>
>
<br>
<br>
Did you configure the smtp server in
/var/ossec/etc/ossec.conf?
<br>
Do you see any errors in your smtp server's logs (often
/var/log/maillog)?
<br>
<br>
> --
<br>
>
<br>
> ---
<br>
> You received this message because you are
subscribed to the Google Groups "ossec-list" group.
<br>
> To unsubscribe from this group and stop receiving
emails from it, send an email to <a href="javascript:"
target="_blank" gdf-obfuscated-mailto="7bk2wbg1BwAJ"
rel="nofollow"
onmousedown="this.href='javascript:';return true;"
onclick="this.href='javascript:';return true;"
moz-do-not-send="true">ossec...@<wbr>googlegroups.com</a>.
<br>
> To view this discussion on the web visit <a
href="https://groups.google.com/d/msgid/ossec-list/a9ff0723-17c0-4707-b53d-df1f0d4b96fbo%40googlegroups.com"
target="_blank" rel="nofollow"
onmousedown="this.href='https://groups.google.com/d/msgid/ossec-list/a9ff0723-17c0-4707-b53d-df1f0d4b96fbo%40googlegroups.com';return
true;"
onclick="this.href='https://groups.google.com/d/msgid/ossec-list/a9ff0723-17c0-4707-b53d-df1f0d4b96fbo%40googlegroups.com';return
true;" moz-do-not-send="true">https://groups.google.com/d/<wbr>msgid/ossec-list/a9ff0723-<wbr>17c0-4707-b53d-df1f0d4b96fbo%<wbr>40googlegroups.com</a>.
<br>
</blockquote>
</div>
</div>
</div>
</div>
-- <br>
<br>
--- <br>
You received this message because you are subscribed to the Google
Groups "ossec-list" group.<br>
To unsubscribe from this group and stop receiving emails from it,
send an email to <a
href="mailto:ossec-list+unsubscribe@googlegroups.com"
moz-do-not-send="true">ossec-list+unsubscribe@googlegroups.com</a>.<br>
To view this discussion on the web visit <a
href="https://groups.google.com/d/msgid/ossec-list/42dad815-132e-49d5-b159-aae10e48775eo%40googlegroups.com?utm_medium=email&utm_source=footer"
moz-do-not-send="true">https://groups.google.com/d/msgid/ossec-list/42dad815-132e-49d5-b159-aae10e48775eo%40googlegroups.com</a>.<br>
</blockquote>
</body>
</html>
<p></p>
-- <br />
<br />
--- <br />
You received this message because you are subscribed to the Google Groups \
"ossec-list" group.<br /> To unsubscribe from this group and stop receiving \
emails from it, send an email to <a \
href="mailto:ossec-list+unsubscribe@googlegroups.com">ossec-list+unsubscribe@googlegroups.com</a>.<br \
/> To view this discussion on the web visit <a \
href="https://groups.google.com/d/msgid/ossec-list/4d9c5791-1333-c39a-7e7f-15946d60f38 \
9%40fuhrmann.homedns.org?utm_medium=email&utm_source=footer">https://groups.google.com \
/d/msgid/ossec-list/4d9c5791-1333-c39a-7e7f-15946d60f389%40fuhrmann.homedns.org</a>.<br \
/>
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic