Hi! I launched:
tcpdump -X host aspmx.l.google.com and received the next information: "Our.system.has.detected.an.unusual.rate.of..421-4.7.0.unsolicited.mail.originating.from.y our.IP.address.To.protect.our.421-4.7.0.users. from.spam,.mailsent.from.your.IP.address.has.been.temporarily.421-4.7.0.rate.limited..Please.visit..421-4.7.0. http://www.google.com/mail/help/bulk_mail.html.to.review.our.Bulk..421.4.7.0.Email.Senders.Guidelines..d7si22390 712wiz.107.-.gsm" maybe the problem is the message type? Now, i revised my other Ossec servers with 2.7.1 version, and i see the same problem, but the servers, the 7th of August, launch it last message. Maybe google change something and dislike Ossec messages? These 2.7.1 servers have the same configuration during the last year. Ossec must review this problem? anyone have google smtp server in the ossec.conf and review if his server can send mails? *But i use your recomendation and used local smtpd:* [....] *<smtp_server>localhost.</smtp_server>* <email_from>ossec_pro@lalalalala</email_from> </global> *and works fine!!* Thanks for the inspiration and sorry, my english is bad!! 2014-08-19 13:42 GMT+02:00 dan (ddp) <[email protected]>: > On Tue, Aug 19, 2014 at 5:01 AM, Mónica Boto <[email protected]> > wrote: > > > > Yes, i tried all the solutions of this list. > > > > for example: > > > > host -t MX google.com and try other possible domains. > > > > I use a complete FQDN, the same that i can see in /var/mail/root. > > > > I can connect to google servers on port 25 with telnet. > > > > I can send mails with the console. > > > > Before, i had a 2.71 release, and work fine, i installed the 2.8 and > can't send mails. > > > > Maybe this version is not compatible with other versions? > > > > Today, i have a server with 2.8 version, but the agents is a 2.7.1 > version. > > > > Also, use the debug log but the info is the same: > > > > 2014/08/19 10:53:14 os_sendmail(1767): WARN: End of DATA not accepted by > server > > 2014/08/19 10:53:14 ossec-maild(1223): ERROR: Error Sending email to > 74.125.24.26 (smtp server) > > > > > > any other idea? > > > > Use tcpdump to try and find more information on why this is failing. > This is one of the reasons I like utilizing the local smtpd to send > the emails "off site." > > > Thanks for al! > > > > > > > > 2014-08-18 19:13 GMT+02:00 dan (ddp) <[email protected]>: > > > >> On Mon, Aug 18, 2014 at 7:37 AM, Mónica Boto <[email protected]> > wrote: > >> > Hello: > >> > > >> > I have problem with the last Ossec version "OSSEC HIDS v2.8". > >> > > >> > I configured the mail during the installation, and this is my > ossec.conf: > >> > > >> > <global> > >> > <email_notification>yes</email_notification> > >> > <email_to>**********@*********</email_to> > >> > <smtp_server>alt2.aspmx.l.google.com.</smtp_server> > >> > <email_from>root@*********</email_from> > >> > </global> > >> > > >> > > >> > In the log, i found the next errors: > >> > > >> > 2014/08/14 18:39:12 os_sendmail(1767): WARN: End of DATA not accepted > by > >> > server > >> > 2014/08/14 18:39:12 ossec-maild(1223): ERROR: Error Sending email to > >> > 74.125.25.27 (smtp server) > >> > > >> > > >> > I didn't find the possible solution. > >> > > >> > Any idea? > >> > > >> > >> Do a search in the archives, there have been plenty of other threads > >> from people who had this issue. > >> > >> > Thanks!! > >> > > >> > -- > >> > > >> > --- > >> > You received this message because you are subscribed to the Google > Groups > >> > "ossec-list" group. > >> > To unsubscribe from this group and stop receiving emails from it, > send an > >> > email to [email protected]. > >> > For more options, visit https://groups.google.com/d/optout. > >> > >> -- > >> > >> --- > >> You received this message because you are subscribed to the Google > Groups "ossec-list" group. > >> To unsubscribe from this group and stop receiving emails from it, send > an email to [email protected]. > >> For more options, visit https://groups.google.com/d/optout. > > > > > > > > > > -- > > > > www.beeva.com > > > > Mónica Boto Morán > > Departamento de Sistemas > > [email protected] > > 915377500 > > > > NOS VEMOS EN > > > > Foro de innovación y tecnología > > > > > > > > -- > > > > --- > > You received this message because you are subscribed to the Google > Groups "ossec-list" group. > > To unsubscribe from this group and stop receiving emails from it, send > an email to [email protected]. > > For more options, visit https://groups.google.com/d/optout. > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. > -- <http://www.beeva.com> www.beeva.com - <https://twitter.com/beeva_es> - <https://www.linkedin.com/company/beeva> - <https://www.youtube.com/channel/UC0bERjplMo6-biH2kRHV9MQ> - <https://es-es.facebook.com/somosBEEVA> - <http://www.slideshare.net/BEEVA_es> - <https://plus.google.com/u/0/113795163649785914137/posts> *Mónica Boto Morán* Departamento de Sistemas [email protected] 915377500 NOS VEMOS EN <http://www.beeva.com> Foro de innovación y tecnología <http://www.beeva.com> [image: think before printing] -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
