Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

E-mail Alert not receiving from ossec server 3.6.0 on ubuntu 18.04.04 #1859

Open
siddharth58 opened this issue Mar 27, 2020 · 9 comments
Open

E-mail Alert not receiving from ossec server 3.6.0 on ubuntu 18.04.04 #1859

siddharth58 opened this issue Mar 27, 2020 · 9 comments

Comments

@siddharth58
Copy link

Hi,
i have installed ossec 3.6.0 on ubuntu 18.04.04
on that time of installation of ossec i have entered my email id and smtp details.

now trying to change active alert setting and frequency setting .
and also try to check smtp details but not successful..
need help..
@ddpbsd
Copy link
Member

ddpbsd commented Mar 27, 2020

Can you check the mail server's logs to see why it isn't working?
Are there any maild logs in ossec.log?

@siddharth58
Copy link
Author

hi
thank you very much for your reply..
yes i jave check its showing error in smtp.
could you pls help me to resolve this , i'm new in this.

i have attached log file could pls guide me ..?
thank you :)
ossec.txt

@ddpbsd
Copy link
Member

ddpbsd commented Mar 27, 2020

So OSSEC expects a 220 from the smtpd when it connects. It throws the banner error when it doesn't get that.

@siddharth58
Copy link
Author

siddharth58 commented Mar 27, 2020 via email

@ddpbsd
Copy link
Member

ddpbsd commented Mar 27, 2020

I don't know how secureserver.net is setup. Look through their directions. I'm guessing you'll need auth though, so OSSEC will need some kind of relay to do that.

@siddharth58
Copy link
Author

Hi,
thanks yes i have just mention smtp in email configuration.
could you pls help me to add relay on OSSEC.

@ddpbsd
Copy link
Member

ddpbsd commented Apr 15, 2020

I don't think Ubuntu comes with an smtpd by default, so pick one and set it up as a relay.

@siddharth58
Copy link
Author

yes, i have installed sendmail and try to get email alert on my domain but failed then i try postfix.
when i configure gmail account i get alerts but when i'm using my domain then its failed.
so i think its issue of our smtp server.

@atomicturtle
Copy link
Member

Tagged as stale/closed if no further responses in 7 days

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@atomicturtle @ddpbsd @siddharth58