You have to find out the error the remote smtp server gives you. I think it's easiest to route through a local smtpd, but you have it configured to go directly through the remote. Running tcpdump on the manager (tcpdump -Xxnnnevvvs 0 port 25) should provide the error the ossec manager gets from the remote smtp server. You can then use that error to either configure ossec or the remote smtp properly.
On Thu, Jun 23, 2011 at 11:55 PM, SystemAli <[email protected]> wrote: > My Cpanel Server is an Agent and is sending logs to the OSSEC Server, But > the OSSEC Server is not being able to send mails to me regarding any > alert...This is what the issue is at the moment > > > On Fri, Jun 24, 2011 at 8:48 AM, Netsyphon <[email protected]> wrote: >> >> On the server telnet the smtp address you put in the config on port 25, do >> you get a response? Most Cpanel hosts give you a smtp relay, or may even >> allow you to mail directly. Is your mailhost the localhost or a relay? >> >> On Jun 23, 2011, at 22:56, SystemAli <[email protected]> wrote: >> >> Yes the logs are getting registered on the Server, I am done with phase >> one :) >> This is the second part and i need to get this running ASAP... >> >> On Fri, Jun 24, 2011 at 7:34 AM, Netsyphon <[email protected]> wrote: >>> >>> On the server, which is what sends messages. We can assume that the logs >>> are making it to the server? >>> >>> On Jun 23, 2011, at 21:13, SystemAli <[email protected]> wrote: >>> >>> tcpdump on the agnets ? >>> >>> On Fri, Jun 24, 2011 at 6:36 AM, dan (ddp) <[email protected]> wrote: >>>> >>>> Either look at the log messages on the smtp server, or run a tcpdump >>>> to try and find out the error. >>>> >>>> On Thu, Jun 23, 2011 at 8:59 PM, SystemAli <[email protected]> wrote: >>>> > Dan : >>>> > Can you also update me on this please ? >>>> > >>>> > On Fri, Jun 24, 2011 at 3:40 AM, SystemAli <[email protected]> >>>> > wrote: >>>> >> >>>> >> Hello Erik : >>>> >> No My server is a Plain Linux server with no firewall BUT my client >>>> >> machine is using Cpanel and i have no CSF on it either..What is the >>>> >> other >>>> >> way i can trouble shoot it ? >>>> > >>>> > >>>> > -- >>>> > "Want to be a leader? Wash the Dishes When Nobody Else Will" >>>> > >>> >>> >>> >>> -- >>> "Want to be a leader? Wash the Dishes When Nobody Else Will" >> >> >> >> -- >> "Want to be a leader? Wash the Dishes When Nobody Else Will" > > > > -- > "Want to be a leader? Wash the Dishes When Nobody Else Will" >
