On Mon, Jun 17, 2013 at 10:58 AM, David Blanton
<[email protected]> wrote:
> Yes I am getting mail to root@ossec-server.
>
> Could you please give me directions to tcpdump on port 25? I am not familiar
> with that.
>


As root (or use sudo):

tcpdump port 25

If it doesn't automatically select the correct interface, add "-i INTERFACE"

> I will check mailserver logs right now.
>
>
> On Monday, June 17, 2013 10:12:15 AM UTC-4, David Blanton wrote:
>>
>>
>>       Hi all,
>>
>> I've been running OSSEC in a test enviornment for a company I work for.
>> I've been trying to get
>> the SMS function to work and send e-mail alerts to my cellphone however it
>> is not working. Any insight is greatly appreciated.
>> Here is the portion of the ossec.conf file that is pertinent. Am I doing
>> something wrong?
>>
>>
>>
>> <ossec_config>
>>   <global>
>>     <email_notification>yes</email_notification>
>>     <email_to>root@ossec-server</email_to>
>>     <smtp_server>ossec-server</smtp_server>
>>     <email_from>ossecm@ossec-server</email_from>
>>     <email_maxperhour>20</email_maxperhour>
>>
>>
>>   </global>
>>
>>
>>   <email_alerts>
>>     <email_to>##########@txt.att.net</email_to>
>>     <level>6</level>
>>     <do_not_delay />
>>     <format>sms</format>
>>   </email_alerts>
>>
>> <alerts>
>>     <log_alert_level>4</log_alert_level>
>>     <email_alert_level>4</email_alert_level>
>>   </alerts>
>
> --
>
> ---
> You received this message because you are subscribed to the Google Groups
> "ossec-list" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> For more options, visit https://groups.google.com/groups/opt_out.
>
>

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.


Reply via email to