On Mon, Jun 17, 2013 at 11:37 AM, David Blanton <[email protected]> wrote: > Jun 17 11:05:52 ossec-server sendmail[28416]: r5HF5qov028416: to=ossecm, > ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, > pri=30037, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent > (r5HF5qSj028417 Message accepted for delivery) > Jun 17 11:05:52 ossec-server sendmail[28418]: r5HF5qSj028417: > to=<[email protected]>, > ctladdr=<[email protected]> (0/0), delay=00:00:00, > xdelay=00:00:00, mailer=local, pri=30675, dsn=2.0.0, stat=Sent >
Now do this grep: `grep "txt.att.net" /var/log/maillog*` This will tell you if any attempts have been made to email that email address. If nothing is returned, make sure you have restarted the ossec processes on the server after making the changes to the configuration. Also make sure ossec-maild is running. > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/groups/opt_out. > > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
