Hi Peter,

It shouldn't make any different between running OSSEC on a real server
or on vmware, so I think
these problems are more related to network connectivity or some other issue.

Anyway, to troubleshoot ossec-maild, I would try first to send an
e-mail using telnet. From the
log, it says that it can't connect to port 25 of the smtp server, so try:

$ telnet mailserver 25

If you don't get a reply, you need to check your nat tables/firewall
rules to see where it is blocking it.

For the second error, from the agent, it seems that the agent is not
able to connect to the server, so
I would try checking the IPs and if you can connect. A simple test
using netcat should work...

If you are able to login to IRC, we can try debug it on "real time".

Hope it helps.

--
Daniel B. Cid
dcid ( at ) ossec.net


On Dec 18, 2007 4:44 PM, Peter M. Abraham <[EMAIL PROTECTED]> wrote:
>
> Greetings:
>
> I'm having the same problem on a non VPS CentOS 5, 32-bit server.
>
> 2007/12/18 14:42:58 ossec-agentd(1218): Unable to send message to
> server.
> 2007/12/18 14:42:58 ossec-agentd(1218): Unable to send message to
> server.
> 2007/12/18 14:42:58 ossec-agentd(1218): Unable to send message to
> server.
> 2007/12/18 14:42:58 ossec-agentd(1218): Unable to send message to
> server.
> 2007/12/18 14:42:58 ossec-agentd(1218): Unable to send message to
> server.
>
> Please advise how I can trouble shoot this problem.
>
> Thank you.
>

Reply via email to