Paolo, I've had the same issue, and as far as I can find out, No, ossec does not give you that option. Follow this link to the OSSEC suggestion forum if you want to enter a feature request: http://ossec.uservoice.com/forums/18254-general
I use Nagios to handle all notifications. It's a more versatile notification system and it'll handle SMTP AUTH. Here's a link to an active response script I wrote to send ossec alerts to nagios: http://groups.google.com/group/ossec-list/browse_thread/thread/e29c5d71926b8af5/40aafc864dfdb749 Good luck, Dave
