On Wed, Jan 7, 2015 at 5:36 AM, Rinck Sonnenberg <r.sonnenb...@netson.nl>
wrote:

> Hi,
>
>
Hello Rinck,


> I'm new to the mailing list and hope to find some help/info here regarding
> PSAD.
>
> I noticed that PSAD has a fixed dependency on postfix (at least on my
> Ubuntu 14.04 LTS system). Is there a way to disable this dependency? I am
> not using email alerts in PSAD and do not want to install postfix on all
> servers running PSAD. FWIW: I use Logstash to analyze my syslog and notify
> me (via nagios) of any suspicious behaviour, so having PSAD email me the
> same alert seems like overkill. I also have DSHIELD emails etc disabled.
>
> Simply uninstalling postfix will result in PSAD being uninstalled as well.
> Is there a way to make PSAD work without postfix or any other MTA for that
> matter?
>

Yes, psad, can function without sending any email alerts, and generate only
syslog messages - just set the "ALERTING_METHODS" variable to "nomail" in
the /etc/psad/psad.conf file.

Now, in terms of the postfix dependency on Ubuntu, that is currently
enforced by the package itself but I see the issue. Maybe postfix should
not be an enforced dependency. I'll check with the package maintainer to
see what the options are here. In the meantime, if you are ok with
installing psad via its own installer (see the install.pl script in the
psad sources), then you can get psad installed and running.

Thanks,

--Mike


>
> Regards,
> Rinck
>
>
------------------------------------------------------------------------------
Dive into the World of Parallel Programming! The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net
_______________________________________________
psad-discuss mailing list
psad-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/psad-discuss

Reply via email to