Hi Daniel,
We removed the entire <email _alerts> element and put the <email_to>
back into the global element and the emails work now.
The reason we put in the <email_alerts> element is so that we can set
the <do_not_delay> option to set and <do_not_group> option to set.
We were using something like this:
<email_alerts>
<email_to>[EMAIL PROTECTED]</email_to>
<do_not_delay > set <do_not_delay />
<do_not_group > set <do_not_group />
</email_alerts>
Do you have any ideas why this would stop email alerts? Could it be
syntax?
On Feb 25, 3:52 pm, "Daniel Cid" <[EMAIL PROTECTED]> wrote:
> Hi,
>
> This error means that the smtp server is not responding on port 25. Try
> telnet (or netcat) from your OSSEC system to your smtp server to see if the
> port is open... Maybe you have a firewall in the middle..
>
> Hope it helps.
>
> --
> Daniel B. Cid
> dcid ( at ) ossec.net
>
>
>
> On Mon, Feb 25, 2008 at 5:20 PM, <[EMAIL PROTECTED]> wrote:
>
> > Hello,
>
> > We have ossec 1.4 installed in an agent server config but seem to be
> > having problems receiving emails.
>
> > The ossec.log has the following error. Our smtp server is running
> > sendmail and is operational.
>
> > ossec-maild(1223): Error Sending email to 192.168.xxx.xxx (smtp
> > server)
>
> > I would also appriciate is somebody could give me a explanation on how
> > active agents and available agents works in OSSEC.- Hide quoted text -
>
> - Show quoted text -