Re: [ossec-list] HOW TO CONFIGURE OSSEC WARNING THROUGH EMAIL
On Sat, Jul 11, 2020 at 9:51 PM Jeff Dyke wrote: > > my bad Dan, i thought i remembered somewhere that it was only getting > critical updates. Thanks for the people's time that gets put into it! Sorry > for the confusion, on my part. > No worries, there isn't a lot going on with the code base at the moment. Energy and spare time for hobbies don't come easily these days. > On Thu, Jul 9, 2020 at 8:05 AM dan (ddp) wrote: >> >> On Wed, Jul 8, 2020 at 8:45 PM Jeff Dyke wrote: >> > >> > As Dan alluded to, I use a local postfix null mailer on my lan that sends >> > to a postfix relay from a single/failover point that then sends to gmail. >> > >> > Dan. I have a question for you, perhaps i should start a new thread, but >> > you're so damn diligent about responding to queries, i thought i may just >> > append to my answer. I know that OSSEC is EOL except for serious >> > changes/bugs. I've used ossec for years and eventually moved to wazuh, >> > which I appreciate the fact that your name is in the credits, What is the >> > plan to support the current and non moving version of OSSEC? >> > >> >> This is news to me. AFAIK the project isn't dead, just moving very >> slowly. There's no commercial entity behind development, so it gets >> the time and energy people put into it. >> >> > Thank you for all of your efforts, being on this list for many years has >> > taught me a lot about the underpinnings of your project! >> > >> > Thanks, >> > Jeff >> > >> > On Wed, Jul 8, 2020 at 2:55 PM dan (ddp) wrote: >> >> >> >> On Tue, Jul 7, 2020 at 4:29 AM lê danh wrote: >> >> > >> >> > I am a new user, I just have ossec installed and I want to try its >> >> > email feature. I have configured the email address in ossec.conf as >> >> > follows: >> >> > >> >> > >> >> > >> >> > yes >> >> > conme...@gmail.com >> >> > alt4.gmail-smtp-in.l.google.com. >> >> > ossecm @ ubuntu >> >> > >> >> > >> >> > >> >> > conme...@gmail.com >> >> > 5 >> >> > >> >> > >> >> > and expect to receive email alerts at level 5 or higher, but the error >> >> > has occurred as follows: >> >> > 2020/07/06 02:51:42 ossec-maild (1261): ERROR: Waiting for child >> >> > process. (status: 139). >> >> > 2020/07/06 02:51:42 ossec-maild (1223): ERROR: Error Sending email to >> >> > alt4.gmail-smtp >> >> > >> >> > It didn't work, I hope everyone can help me fix this problem as soon as >> >> > possible. Sincerely thank you. >> >> > >> >> >> >> I'm pretty sure gmail requires authentication. So you'll have to relay >> >> the OSSEC emails through an smtp server that doesn't require auth. >> >> Luckily, the OSSEC server is running on a Linux or other unix-like >> >> system. An smtpd usually comes installed on the good ones. >> >> Configure the locally installed smtpd to relay the messages through gmail. >> >> >> >> > -- >> >> > >> >> > --- >> >> > You received this message because you are subscribed to the Google >> >> > Groups "ossec-list" group. >> >> > To unsubscribe from this group and stop receiving emails from it, send >> >> > an email to ossec-list+unsubscr...@googlegroups.com. >> >> > To view this discussion on the web visit >> >> > https://groups.google.com/d/msgid/ossec-list/c337727b-7a3b-4fa6-a428-3af96a0c4c54o%40googlegroups.com. >> >> >> >> -- >> >> >> >> --- >> >> You received this message because you are subscribed to the Google Groups >> >> "ossec-list" group. >> >> To unsubscribe from this group and stop receiving emails from it, send an >> >> email to ossec-list+unsubscr...@googlegroups.com. >> >> To view this discussion on the web visit >> >> https://groups.google.com/d/msgid/ossec-list/CAMyQvMob1QOQCTti8ryS1Ow9Ezkz5BrMd2Zy2jq1TzoPqarhrA%40mail.gmail.com. >> > >> > -- >> > >> > --- >> > You received this message because you are subscribed to the Google Groups >> > "ossec-list" group. >> > To unsubscribe from this group and stop receiving emails from it, send an >> > email to ossec-list+unsubscr...@googlegroups.com. >> > To view this discussion on the web visit >> > https://groups.google.com/d/msgid/ossec-list/CAHmnZdaGUok%2BijTLnPxXc3izRkcXhPEDMqeVWQH7QJVZT2aWmw%40mail.gmail.com. >> >> -- >> >> --- >> You received this message because you are subscribed to the Google Groups >> "ossec-list" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to ossec-list+unsubscr...@googlegroups.com. >> To view this discussion on the web visit >> https://groups.google.com/d/msgid/ossec-list/CAMyQvMrMtRcuw8J4%3DLz%2BAnEw8myd2H2Pd-wLPSwZgRfapUWgng%40mail.gmail.com. > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to ossec-list+unsubscr...@googlegroups.com. > To view this discussion on the web visit >
Re: [ossec-list] HOW TO CONFIGURE OSSEC WARNING THROUGH EMAIL
my bad Dan, i thought i remembered somewhere that it was only getting critical updates. Thanks for the people's time that gets put into it! Sorry for the confusion, on my part. On Thu, Jul 9, 2020 at 8:05 AM dan (ddp) wrote: > On Wed, Jul 8, 2020 at 8:45 PM Jeff Dyke wrote: > > > > As Dan alluded to, I use a local postfix null mailer on my lan that > sends to a postfix relay from a single/failover point that then sends to > gmail. > > > > Dan. I have a question for you, perhaps i should start a new thread, > but you're so damn diligent about responding to queries, i thought i may > just append to my answer. I know that OSSEC is EOL except for serious > changes/bugs. I've used ossec for years and eventually moved to wazuh, > which I appreciate the fact that your name is in the credits, What is the > plan to support the current and non moving version of OSSEC? > > > > This is news to me. AFAIK the project isn't dead, just moving very > slowly. There's no commercial entity behind development, so it gets > the time and energy people put into it. > > > Thank you for all of your efforts, being on this list for many years has > taught me a lot about the underpinnings of your project! > > > > Thanks, > > Jeff > > > > On Wed, Jul 8, 2020 at 2:55 PM dan (ddp) wrote: > >> > >> On Tue, Jul 7, 2020 at 4:29 AM lê danh wrote: > >> > > >> > I am a new user, I just have ossec installed and I want to try its > email feature. I have configured the email address in ossec.conf as follows: > >> > > >> > > >> > > >> > yes > >> > conme...@gmail.com > >> > alt4.gmail-smtp-in.l.google.com. > >> > ossecm @ ubuntu > >> > > >> > > >> > > >> > conme...@gmail.com > >> > 5 > >> > > >> > > >> > and expect to receive email alerts at level 5 or higher, but the > error has occurred as follows: > >> > 2020/07/06 02:51:42 ossec-maild (1261): ERROR: Waiting for child > process. (status: 139). > >> > 2020/07/06 02:51:42 ossec-maild (1223): ERROR: Error Sending email to > alt4.gmail-smtp > >> > > >> > It didn't work, I hope everyone can help me fix this problem as soon > as possible. Sincerely thank you. > >> > > >> > >> I'm pretty sure gmail requires authentication. So you'll have to relay > >> the OSSEC emails through an smtp server that doesn't require auth. > >> Luckily, the OSSEC server is running on a Linux or other unix-like > >> system. An smtpd usually comes installed on the good ones. > >> Configure the locally installed smtpd to relay the messages through > gmail. > >> > >> > -- > >> > > >> > --- > >> > You received this message because you are subscribed to the Google > Groups "ossec-list" group. > >> > To unsubscribe from this group and stop receiving emails from it, > send an email to ossec-list+unsubscr...@googlegroups.com. > >> > To view this discussion on the web visit > https://groups.google.com/d/msgid/ossec-list/c337727b-7a3b-4fa6-a428-3af96a0c4c54o%40googlegroups.com > . > >> > >> -- > >> > >> --- > >> You received this message because you are subscribed to the Google > Groups "ossec-list" group. > >> To unsubscribe from this group and stop receiving emails from it, send > an email to ossec-list+unsubscr...@googlegroups.com. > >> To view this discussion on the web visit > https://groups.google.com/d/msgid/ossec-list/CAMyQvMob1QOQCTti8ryS1Ow9Ezkz5BrMd2Zy2jq1TzoPqarhrA%40mail.gmail.com > . > > > > -- > > > > --- > > You received this message because you are subscribed to the Google > Groups "ossec-list" group. > > To unsubscribe from this group and stop receiving emails from it, send > an email to ossec-list+unsubscr...@googlegroups.com. > > To view this discussion on the web visit > https://groups.google.com/d/msgid/ossec-list/CAHmnZdaGUok%2BijTLnPxXc3izRkcXhPEDMqeVWQH7QJVZT2aWmw%40mail.gmail.com > . > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to ossec-list+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/ossec-list/CAMyQvMrMtRcuw8J4%3DLz%2BAnEw8myd2H2Pd-wLPSwZgRfapUWgng%40mail.gmail.com > . > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/ossec-list/CAHmnZdZgNmcb4v0UP_MbTVne4-HobBuFuXJ6Mh8%2BqbLkSScKHA%40mail.gmail.com.
Re: [ossec-list] HOW TO CONFIGURE OSSEC WARNING THROUGH EMAIL
On Wed, Jul 8, 2020 at 8:45 PM Jeff Dyke wrote: > > As Dan alluded to, I use a local postfix null mailer on my lan that sends to > a postfix relay from a single/failover point that then sends to gmail. > > Dan. I have a question for you, perhaps i should start a new thread, but > you're so damn diligent about responding to queries, i thought i may just > append to my answer. I know that OSSEC is EOL except for serious > changes/bugs. I've used ossec for years and eventually moved to wazuh, which > I appreciate the fact that your name is in the credits, What is the plan to > support the current and non moving version of OSSEC? > This is news to me. AFAIK the project isn't dead, just moving very slowly. There's no commercial entity behind development, so it gets the time and energy people put into it. > Thank you for all of your efforts, being on this list for many years has > taught me a lot about the underpinnings of your project! > > Thanks, > Jeff > > On Wed, Jul 8, 2020 at 2:55 PM dan (ddp) wrote: >> >> On Tue, Jul 7, 2020 at 4:29 AM lê danh wrote: >> > >> > I am a new user, I just have ossec installed and I want to try its email >> > feature. I have configured the email address in ossec.conf as follows: >> > >> > >> > >> > yes >> > conme...@gmail.com >> > alt4.gmail-smtp-in.l.google.com. >> > ossecm @ ubuntu >> > >> > >> > >> > conme...@gmail.com >> > 5 >> > >> > >> > and expect to receive email alerts at level 5 or higher, but the error has >> > occurred as follows: >> > 2020/07/06 02:51:42 ossec-maild (1261): ERROR: Waiting for child process. >> > (status: 139). >> > 2020/07/06 02:51:42 ossec-maild (1223): ERROR: Error Sending email to >> > alt4.gmail-smtp >> > >> > It didn't work, I hope everyone can help me fix this problem as soon as >> > possible. Sincerely thank you. >> > >> >> I'm pretty sure gmail requires authentication. So you'll have to relay >> the OSSEC emails through an smtp server that doesn't require auth. >> Luckily, the OSSEC server is running on a Linux or other unix-like >> system. An smtpd usually comes installed on the good ones. >> Configure the locally installed smtpd to relay the messages through gmail. >> >> > -- >> > >> > --- >> > You received this message because you are subscribed to the Google Groups >> > "ossec-list" group. >> > To unsubscribe from this group and stop receiving emails from it, send an >> > email to ossec-list+unsubscr...@googlegroups.com. >> > To view this discussion on the web visit >> > https://groups.google.com/d/msgid/ossec-list/c337727b-7a3b-4fa6-a428-3af96a0c4c54o%40googlegroups.com. >> >> -- >> >> --- >> You received this message because you are subscribed to the Google Groups >> "ossec-list" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to ossec-list+unsubscr...@googlegroups.com. >> To view this discussion on the web visit >> https://groups.google.com/d/msgid/ossec-list/CAMyQvMob1QOQCTti8ryS1Ow9Ezkz5BrMd2Zy2jq1TzoPqarhrA%40mail.gmail.com. > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to ossec-list+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/ossec-list/CAHmnZdaGUok%2BijTLnPxXc3izRkcXhPEDMqeVWQH7QJVZT2aWmw%40mail.gmail.com. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/ossec-list/CAMyQvMrMtRcuw8J4%3DLz%2BAnEw8myd2H2Pd-wLPSwZgRfapUWgng%40mail.gmail.com.
Re: [ossec-list] HOW TO CONFIGURE OSSEC WARNING THROUGH EMAIL
As Dan alluded to, I use a local postfix null mailer on my lan that sends to a postfix relay from a single/failover point that then sends to gmail. Dan. I have a question for you, perhaps i should start a new thread, but you're so damn diligent about responding to queries, i thought i may just append to my answer. I know that OSSEC is EOL except for serious changes/bugs. I've used ossec for years and eventually moved to wazuh, which I appreciate the fact that your name is in the credits, What is the plan to support the current and non moving version of OSSEC? Thank you for all of your efforts, being on this list for many years has taught me a lot about the underpinnings of your project! Thanks, Jeff On Wed, Jul 8, 2020 at 2:55 PM dan (ddp) wrote: > On Tue, Jul 7, 2020 at 4:29 AM lê danh wrote: > > > > I am a new user, I just have ossec installed and I want to try its email > feature. I have configured the email address in ossec.conf as follows: > > > > > > > > yes > > conme...@gmail.com > > alt4.gmail-smtp-in.l.google.com. > > ossecm @ ubuntu > > > > > > > > conme...@gmail.com > > 5 > > > > > > and expect to receive email alerts at level 5 or higher, but the error > has occurred as follows: > > 2020/07/06 02:51:42 ossec-maild (1261): ERROR: Waiting for child > process. (status: 139). > > 2020/07/06 02:51:42 ossec-maild (1223): ERROR: Error Sending email to > alt4.gmail-smtp > > > > It didn't work, I hope everyone can help me fix this problem as soon as > possible. Sincerely thank you. > > > > I'm pretty sure gmail requires authentication. So you'll have to relay > the OSSEC emails through an smtp server that doesn't require auth. > Luckily, the OSSEC server is running on a Linux or other unix-like > system. An smtpd usually comes installed on the good ones. > Configure the locally installed smtpd to relay the messages through gmail. > > > -- > > > > --- > > You received this message because you are subscribed to the Google > Groups "ossec-list" group. > > To unsubscribe from this group and stop receiving emails from it, send > an email to ossec-list+unsubscr...@googlegroups.com. > > To view this discussion on the web visit > https://groups.google.com/d/msgid/ossec-list/c337727b-7a3b-4fa6-a428-3af96a0c4c54o%40googlegroups.com > . > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to ossec-list+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/ossec-list/CAMyQvMob1QOQCTti8ryS1Ow9Ezkz5BrMd2Zy2jq1TzoPqarhrA%40mail.gmail.com > . > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/ossec-list/CAHmnZdaGUok%2BijTLnPxXc3izRkcXhPEDMqeVWQH7QJVZT2aWmw%40mail.gmail.com.
Re: [ossec-list] HOW TO CONFIGURE OSSEC WARNING THROUGH EMAIL
On Tue, Jul 7, 2020 at 4:29 AM lê danh wrote: > > I am a new user, I just have ossec installed and I want to try its email > feature. I have configured the email address in ossec.conf as follows: > > > > yes > conme...@gmail.com > alt4.gmail-smtp-in.l.google.com. > ossecm @ ubuntu > > > > conme...@gmail.com > 5 > > > and expect to receive email alerts at level 5 or higher, but the error has > occurred as follows: > 2020/07/06 02:51:42 ossec-maild (1261): ERROR: Waiting for child process. > (status: 139). > 2020/07/06 02:51:42 ossec-maild (1223): ERROR: Error Sending email to > alt4.gmail-smtp > > It didn't work, I hope everyone can help me fix this problem as soon as > possible. Sincerely thank you. > I'm pretty sure gmail requires authentication. So you'll have to relay the OSSEC emails through an smtp server that doesn't require auth. Luckily, the OSSEC server is running on a Linux or other unix-like system. An smtpd usually comes installed on the good ones. Configure the locally installed smtpd to relay the messages through gmail. > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to ossec-list+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/ossec-list/c337727b-7a3b-4fa6-a428-3af96a0c4c54o%40googlegroups.com. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/ossec-list/CAMyQvMob1QOQCTti8ryS1Ow9Ezkz5BrMd2Zy2jq1TzoPqarhrA%40mail.gmail.com.
[ossec-list] HOW TO CONFIGURE OSSEC WARNING THROUGH EMAIL
I am a new user, I just have ossec installed and I want to try its email feature. I have configured the email address in ossec.conf as follows: yes conme...@gmail.com alt4.gmail-smtp-in.l.google.com. ossecm @ ubuntu conme...@gmail.com 5 and expect to receive email alerts at level 5 or higher, but the error has occurred as follows: 2020/07/06 02:51:42 ossec-maild (1261): ERROR: Waiting for child process. (status: 139). 2020/07/06 02:51:42 ossec-maild (1223): ERROR: Error Sending email to alt4.gmail-smtp It didn't work, I hope everyone can help me fix this problem as soon as possible. Sincerely thank you. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/ossec-list/c337727b-7a3b-4fa6-a428-3af96a0c4c54o%40googlegroups.com.
