Sounds like your ossec is trying to start and unable to resolv the dns
entry for the SMTP server.
Check the sequence of the init scripts and make sure the ossec init
comes after the network and the resolveconf service are started.
Assaf
Ivan Lezhnjov Jr. wrote:
Hi everybody!
I've been trying to get OSSEC started at boot time on my Arch Linux laptop and
I discovered that it wouldn't start from init scripts. The reason for this
would be the following lines in the ossec.log file:
2010/04/11 08:45:49 ossec-config(1501): ERROR: Invalid SMTP Server: gmail-smtp-
in.l.google.com
2010/04/11 08:45:50 ossec-config(1202): ERROR: Configuration error at
'/var/ossec/etc/ossec.conf'. Exiting.
2010/04/11 08:45:50 ossec-maild(1202): ERROR: Configuration error at
'/var/ossec/etc/ossec.conf'. Exiting.
Once the system finished booting I can easily run OSSEC via my custom init
script, the same used by init during system start up.
Turning e-mail notification off allowed me to start OSSEC at boot time via init
script. Which consequently prompted my question: does OSSEC try to establish a
connection with the specified SMTP server when reading/loading a configuration
when the process is started?
--
Assaf Flatto
Linux System Administrator
No.9 | 6 Portal Way | London | W3 6RU |
T: +44 (0)20 88 96 8014 | M: +44 (0)75 3568 1067
I am doing a Charity Bike ride On the 27 of June for the
Capital to Coast Charity. Please help by Donating
http://www.justgiving.com/Lovefilm-capital-to-coast
-----------------------------------------------------------------------------------------------------------------------------------------
LOVEFiLM UK Limited is a company registered in England and Wales.
Registered Number: 06528297.
Registered Office: No.9, 6 Portal Way, London W3 6RU, United Kingdom.
This e-mail is confidential to the ordinary user of the e-mail address to which it was addressed. If you have received it in error,
please delete it from your system and notify the sender immediately.
This email message has been delivered safely and archived online by Mimecast.
For more information please visit http://www.mimecast.co.uk
-----------------------------------------------------------------------------------------------------------------------------------------
--
To unsubscribe, reply using "remove me" as the subject.
