Hi,
I just recently installed ossec 0.9 on Redhat Linux and I am getting the
following errors in the logs:
2006/08/08 09:58:44 os_sendmail(1707): End of DATA not accepted by server
2006/08/08 09:58:44 ossec-maild(1223): Error Sending email to 127.0.0.1
(smtp server)
I checked the source and it seems that the email server is not receiving
a satisfactory "250" message from my local SMTP server, which happens to
be qmail. I tried telnetting locally to 25 and sent off a test email
without problems, so it's not asking for authentication. Here is the
relevant ossec.conf entries:
<global>
<email_notification>yes</email_notification>
<email_to>[EMAIL PROTECTED]</email_to>
<smtp_server>localhost</smtp_server>
<email_from>[EMAIL PROTECTED]</email_from>
</global>
The server is running on localhost and the type of installation of ossec
is local. Please let me know if I missed something or if you need
further information.
thank you,
chuck