Hi Daniel,

We removed the entire <email _alerts> element and put the <email_to>
back into the global element and the emails work now.

The reason we put in the <email_alerts> element is so that we can set
the <do_not_delay> option to set and <do_not_group> option to set.

We were using something like this:

<email_alerts>
   <email_to>[EMAIL PROTECTED]</email_to>
     <do_not_delay > set <do_not_delay />
     <do_not_group > set <do_not_group />
 </email_alerts>

Do you have any ideas why this would stop email alerts?   Could it be
syntax?


On Feb 25, 3:52 pm, "Daniel Cid" <[EMAIL PROTECTED]> wrote:
> Hi,
>
> This error means that the smtp server is not responding on port 25. Try
> telnet (or netcat) from your OSSEC system to your smtp server to see if the
> port is open... Maybe you have a firewall in the middle..
>
> Hope it helps.
>
> --
> Daniel B. Cid
> dcid ( at ) ossec.net
>
>
>
> On Mon, Feb 25, 2008 at 5:20 PM,  <[EMAIL PROTECTED]> wrote:
>
> >  Hello,
>
> >  We have ossec 1.4 installed in an agent server config but seem to be
> >  having problems receiving emails.
>
> >  The ossec.log has the following error. Our smtp server is running
> >  sendmail and is operational.
>
> >  ossec-maild(1223): Error Sending email to 192.168.xxx.xxx (smtp
> >  server)
>
> >  I would also appriciate is somebody could give me a explanation on how
> >  active agents and available agents works in OSSEC.- Hide quoted text -
>
> - Show quoted text -

Reply via email to