Re: [ossec-list] not able to send alert mail

2016-07-04 Thread Eero Volotinen
Use local smtp instead of it. Eero 4.7.2016 10.43 ap. "rvb n" kirjoitti: > Hi Friends, > > I am trying to send alert mail from my ossec server to googleapps mail but > i could not make it. getting enclosed error > > my smtp server is googleapp server > >

Re: [ossec-list] OSSEC 2.8.3 - AR scripts host-deny.sh and pf.sh appear to be writing logs to wrong file

2016-07-04 Thread dan (ddp)
On Thu, Jun 30, 2016 at 6:32 PM, Kevin Branch wrote: > Hi folks, > > I was gearing up to start monitoring the OSSEC server and agent AR logs when > I ran into this apparent log path inconsistency in certain AR scripts. > > As I understand, the OSSEC AR log path for

Re: [ossec-list] separate notifications

2016-07-04 Thread Jesus Linares
Hi Andreas, enable "logall" option in ossec.conf. You will see the all events in /var/ossec/logs/archives/archives.log. Syscheck events look like: "Integrity checksum changed for: '/path1/path2/path3/file.ext'". So, you could create a rule like: syscheck for: '/etc Syscheck: /etc

[ossec-list] not able to send alert mail

2016-07-04 Thread rvb n
Hi Friends, I am trying to send alert mail from my ossec server to googleapps mail but i could not make it. getting enclosed error my smtp server is googleapp server os_sendmail(1767): WARN: End of DATA not accepted by server 2016/07/04 07:26:37 ossec-maild(1223): ERROR: Error Sending email to