Hi,
I'm using local MTA agent in my ossec server to forward mails to gmail
(and this MTA is listening connections and relaying mails only from
localhost)
<email_notification>yes</email_notification>
<email_to>[email protected]</email_to>
<smtp_server>localhost</smtp_server>
<email_from>[email protected]</email_from>
I just tested that configuration that Richard sent
( <smtp_server>alt2.gmail-smtp-in.l.google.com</smtp_server> ) and
it is working too. Personally I prefer local MTA setup because I don't
like to to put google smtp-server name in my configuration, someday
the name or relaying through that server might change.
I'm not familiar with ssmtp, but my guess is that it is not working
with ossec.
BR,
Timo
On Dec 29, 3:29 pm, Alekto Antarctica <[email protected]>
wrote:
> Hi again guys!
> I have been trying alot of your suggestions with no luck!
> But i found
> this(http://tombuntu.com/index.php/2008/10/21/sending-email-from-your-syst...)
> ssmtp program allowing me to send mail from my host through my Gmail
> account, and this works perfectly!
>
> But I have not manage to connect ssmtp to my ossec for mail
> notifications, is there anybody who has done this or have any hints on
> how to do this?
>
> X Alekto
>
> 2009/12/20 Richard Bejtlich <[email protected]>:
>
> > Hello everyone,
>
> > Sorry to top-post, but...
>
> > I didn't need to configure authentication. I use the following on a
> > server I have at a colo site.
>
> > <ossec_config>
> > <global>
> > <email_notification>yes</email_notification>
> > <email_to>[email protected]</email_to>
> > <smtp_server>alt2.gmail-smtp-in.l.google.com</smtp_server>
> > <email_from>taosecur...@tao001.[omitted].net</email_from>
> > </global>
>
> > I just got an alert from OSSEC after running apt-get upgrade on the server.
>
> > Sincerely,
>
> > Richard
>
> > On Sun, Dec 20, 2009 at 9:39 AM, Valter Santos <[email protected]> wrote:
> >> Hey,
>
> >> You are missing authentication to the gmail server. OSSEC will not
> >> handle authentication for you, the way to go is to setup a MTA on your
> >> OSSEC server. You can still use the gmail server from the MTA,
> >> configuring gmail authentication there. Then setup OSSEC to send
> >> notifications via localhost.
>
> >> /valter
>
> >> On Sat, Dec 19, 2009 at 10:16 PM, Alekto Antarctica
> >> <[email protected]> wrote:
> >>> Hi!
> >>> I downloaded and successfully installed ossec hids v.2.3 today on my
> >>> Ubunt 8.10. But I still got problems receiving email notifications
> >>> send from my host to a gmail account. I have been googeling around,
> >>> and tried a lot of different settings in my /var/ossec/etc/ossec.conf
> >>> file. This is now my current <global> settings:
>
> >>> <global>
> >>> <email_notification>yes</email_notification>
> >>> <email_to>[email protected]</email_to>
> >>> <smtp_server>alt1.gmail-smtp-in.l.google.com</smtp_server>
> >>> <email_from>oss...@myhostname</email_from>
> >>> </global>
