Nothing returned.

I do restart the ossec by doing /var/bin/ossec-control restart many times.

Is there a way to change which port ossecm (mail sender) uses? how do i add 
my intranet dns resolver to ossec, i believe that may be the issue.

On Monday, June 17, 2013 11:47:31 AM UTC-4, dan (ddpbsd) wrote:
>
> On Mon, Jun 17, 2013 at 11:37 AM, David Blanton 
> <[email protected] <javascript:>> wrote: 
> > Jun 17 11:05:52 ossec-server sendmail[28416]: r5HF5qov028416: to=ossecm, 
> > ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, 
> > pri=30037, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent 
> > (r5HF5qSj028417 Message accepted for delivery) 
> > Jun 17 11:05:52 ossec-server sendmail[28418]: r5HF5qSj028417: 
> > to=<[email protected] <javascript:>>, 
> > ctladdr=<[email protected] <javascript:>> 
> (0/0), delay=00:00:00, 
> > xdelay=00:00:00, mailer=local, pri=30675, dsn=2.0.0, stat=Sent 
> > 
>
> Now do this grep: 
>
> `grep "txt.att.net" /var/log/maillog*` 
>
> This will tell you if any attempts have been made to email that email 
> address. If nothing is returned, make sure you have restarted the 
> ossec processes on the server after making the changes to the 
> configuration. Also make sure ossec-maild is running. 
>
>
> > -- 
> > 
> > --- 
> > You received this message because you are subscribed to the Google 
> Groups 
> > "ossec-list" group. 
> > To unsubscribe from this group and stop receiving emails from it, send 
> an 
> > email to [email protected] <javascript:>. 
> > For more options, visit https://groups.google.com/groups/opt_out. 
> > 
> > 
>

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.


Reply via email to