ossec-hid, configuration for gmail smtp server (email alerts) & related questions

[Arthur R]

I have compiled ossec-hid here on my Ubuntu box.  It asked for email notification, i selected yes.  I entered my gmail address, and it seemed to have auto detected a default gmail smtp server for email reporting.  it did not however, prompt for a password for smtp sending.  I am unsure if a password is necessary for the sending of SMTP gmail, however, i'd rather not wait until its too late to find out.  also, i dont have a sendmail daemon on its system.  I assumed that since it detected gmail smtp, that perhaps, it might be able to simply, send the mail.  perhaps i need clarification on this too. 

thanks so much. 

---

Windows Live™: Keep your life in sync. See how it works.

[cnk]

Hey Arthur,

This has come up before. The solution was to use this smtp server and
make sure your ISP isn't blocking outbound smtp traffic:

<smtp_server>alt2.gmail-smtp-in.l.google.com.</smtp_server>

Cheers,

cnk

[Marcos Neves]

Yes, OSSEC-HIDS does not support gmail cause TLS plus email authentication.

A solution I use is install email-relay and configure it to send using gmail.

Works like a charm! :)

Marcos Neves
+55 44 3263-8132
+55 44 9918-8488

[Daniel Cid]

Hi Marcos,

It supports gmail for sure :) You just need to use the proper smtp
server instead
of the one they specify in their help online. The reason is that if
you want to send
emails to addresses outside their domain, you need the authentication, but if
you want to send to any gmail address, you don't need that at all (otherwise
no one else would be able to send emails to gmail).

These are the domains you can use for gmail:

dcid@brrkey:~$ host -t mx gmail.com
gmail.com mail is handled by 5 gmail-smtp-in.l.google.com.
gmail.com mail is handled by 10 alt1.gmail-smtp-in.l.google.com.
gmail.com mail is handled by 10 alt2.gmail-smtp-in.l.google.com.
gmail.com mail is handled by 50 gsmtp147.google.com.
gmail.com mail is handled by 50 gsmtp183.google.com.

thanks,

--
Daniel B. Cid
dcid ( at ) ossec.net

On Thu, Feb 5, 2009 at 3:53 PM, Marcos Neves <marcos...@gmail.com> wrote:
> Yes, OSSEC-HIDS does not support gmail cause TLS plus email authentication.
> A solution I use is install email-relay and configure it to send using
> gmail.
> Works like a charm! :)
> Marcos Neves
> +55 44 3263-8132
> +55 44 9918-8488
>
>

[Joao Tomas]

Hello Everyone,

These smtp servers are active still? I have tried all of them but no of them work.
I also tried smtp.gmail.com but not response, same error in ossec log:
2015/03/02 19:05:23 ossec-maild(1223): ERROR: Error Sending email to xxx.xx.xxx.xxx (smtp server)

Do you know how to configure ossec server  to receive the alerts in gmail?

Thank you in advance!

[dan (ddp)]

On Tue, Mar 3, 2015 at 1:41 PM, Joao Tomas <garc...@gmail.com> wrote:
> Hello Everyone,
>
> These smtp servers are active still? I have tried all of them but no of them
> work.
> I also tried smtp.gmail.com but not response, same error in ossec log:
> 2015/03/02 19:05:23 ossec-maild(1223): ERROR: Error Sending email to
> xxx.xx.xxx.xxx (smtp server)
>
> Do you know how to configure ossec server to receive the alerts in gmail?
>

Either use tcpdump to try and get more information about the error, or
relay the emails through an actual smtpd.

>> >> > Windows Live(tm): Keep your life in sync. See how it works.
>> >
>> >
>
> --
>
> ---
> You received this message because you are subscribed to the Google Groups
> "ossec-list" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to ossec-list+...@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.