SMTP configuration so-email.conf

360 views
Skip to first unread message

dan confused

unread,
Dec 15, 2016, 11:08:30 AM12/15/16
to security-onion
Hello (again),

I'm following the steps for the daily email setup and have hit a snag. Our smtp is run through office 365 (we do have an onsite relay). Within so-email.conf, what naming convention should be used for authentication? Additionally, if this would not be supported, how can I specify which port and sender address should be utilized on our relay server?

I.e.
MAILSERVER="ourmai...@company.com:25 -username noreply"

or would this be a separate variable?

Thanks in advance!
Dan

Wes Lambert

unread,
Dec 15, 2016, 11:55:25 AM12/15/16
to securit...@googlegroups.com

Dan,

What mail utility are you using?

Thanks,
Wes


On Dec 15, 2016 11:08 AM, "dan confused" <stupi...@gmail.com> wrote:
Hello (again),

    I'm following the steps for the daily email setup and have hit a snag. Our smtp is run through office 365 (we do have an onsite relay). Within so-email.conf, what naming convention should be used for authentication? Additionally, if this would not be supported, how can I specify which port and sender address should be utilized on our relay server?

I.e.
MAILSERVER="ourmailrelay@company.com:25 -username noreply"


or would this be a separate variable?

Thanks in advance!
Dan

--
Follow Security Onion on Twitter!
https://twitter.com/securityonion
---
You received this message because you are subscribed to the Google Groups "security-onion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to security-onion+unsubscribe@googlegroups.com.
To post to this group, send email to security-onion@googlegroups.com.
Visit this group at https://groups.google.com/group/security-onion.
For more options, visit https://groups.google.com/d/optout.

dan confused

unread,
Dec 15, 2016, 2:30:41 PM12/15/16
to security-onion
Wes,

The attempt was aimed at using existing, external mail utiliies. But I am guessing this is not a possibility based on your response :)

Thanks,
Dan

Wes Lambert

unread,
Dec 15, 2016, 4:18:04 PM12/15/16
to securit...@googlegroups.com

I wasn't sure if you were configuring nullmailer, etc.  You'll need to be able to relay your mail to another server/relay.

A great way to do this is to configure each of the application's email alerts
to go to root at localhost.  Then have postfix/mailutils  forward all mail to root to an address defined in /etc/aliases.  With postfix, most of the settings are defined in main.cf.  The so-email script can assist with this by auto-configuring email based on your choices.

Thanks,
Wes


dan confused

unread,
Dec 16, 2016, 9:55:31 AM12/16/16
to security-onion
Wes,

Thanks a bunch. I'll work on this today!

Dan

Reply all
Reply to author
Forward
0 new messages