Hi Moazami, On Thu, Apr 28, 2011 at 10:58 AM, moazami <[email protected]> wrote: > > Hi dan, > >>Are the emails being rejected? > I receive this error in log file: > > 2011/03/01 13:56:59 ossec-maild(1223): ERROR: Error Sending email to > 67.28.113.19 (smtp server)
You'll have to find out why the smtp server is rejecting your emails. You can run tcpdump to see what errors they provide, or route the OSSEC emails through your own smtp server for better logging. Also, yahoo might have documentation on how to set things like this up, so check with them. > >>Are the alerts being triggered high enough level to be emailed out? > yes. > > >>How do you have it configured? > I configured in ossec.conf as follows: > > <global> > <email_notification>yes</email_notification> > <email_to>[email protected]</email_to> > <smtp_server>67.28.113.19</smtp_server> > <email_from>"default address"</email_from> > <email_maxperhour>20</email_maxperhour> > </global> > 67.28.113.19 is IP of yahoo smtp server. > > Best Regards.
