Hello everyone,
Sorry to top-post, but...
I didn't need to configure authentication. I use the following on a
server I have at a colo site.
<ossec_config>
<global>
<email_notification>yes</email_notification>
<email_to>[email protected]</email_to>
<smtp_server>alt2.gmail-smtp-in.l.google.com</smtp_server>
<email_from>taosecur...@tao001.[omitted].net</email_from>
</global>
I just got an alert from OSSEC after running apt-get upgrade on the server.
Sincerely,
Richard
On Sun, Dec 20, 2009 at 9:39 AM, Valter Santos <[email protected]> wrote:
> Hey,
>
> You are missing authentication to the gmail server. OSSEC will not
> handle authentication for you, the way to go is to setup a MTA on your
> OSSEC server. You can still use the gmail server from the MTA,
> configuring gmail authentication there. Then setup OSSEC to send
> notifications via localhost.
>
> /valter
>
> On Sat, Dec 19, 2009 at 10:16 PM, Alekto Antarctica
> <[email protected]> wrote:
>> Hi!
>> I downloaded and successfully installed ossec hids v.2.3 today on my
>> Ubunt 8.10. But I still got problems receiving email notifications
>> send from my host to a gmail account. I have been googeling around,
>> and tried a lot of different settings in my /var/ossec/etc/ossec.conf
>> file. This is now my current <global> settings:
>>
>> <global>
>> <email_notification>yes</email_notification>
>> <email_to>[email protected]</email_to>
>> <smtp_server>alt1.gmail-smtp-in.l.google.com</smtp_server>
>> <email_from>oss...@myhostname</email_from>
>> </global>
