On Sun, Oct 17, 2010 at 5:32 AM, Lendz <[email protected]> wrote: > Hi all, I got these problem. > I installed window agent on window 7 system, when I add OSSEC's IP and > key then start agent software, I got the announcement "Unable to start > OSSEC (check config)". I checked agent's log: > > ossec-agent(4101): WARN: Waiting for server reply (not started). > Tried: '192.168.73.131'. > ossec-agent: INFO: Trying to connect to server (192.168.73.131:1514). > > (I turned off windows firewall and OSSEC's firewall) > when I check OSSEC's server with command: /var/ossec/bin/agent_control > -l > > ID: 000, Name: localhost.localdomain (server), IP: 127.0.0.1, Active/ > Local > ID: 001, Name: Windows, IP: 192.168.3.2, Never connected > > I added agent's IP in > <global> > <white_list>192.168.3.2</white_list> > </global> > > <remote> > <connection>syslog</connection> > <allowed-ips>192.168.3.2</allowed-ips> > </remote> >
Make sure packets are making it from the agent to the manager (udp port 1514). Make sure the agent's IP is unique. > In OSSEC's log I also got "ossec-maild(1223): ERROR: Error Sending > email to 74.125.77.27 (smtp server)" > I'm using Gmail for alert > > Please tell me what problem I got and how to fix it > Many thanks > Doesn't gmail require authentication? If so, feed it through your local SMTP server and configure that to authenticate properly. Otherwise, do a tcpdump to see if you can find out why it can't send the email through gmail's servers.
