SMTP Configuration

40 views
Skip to first unread message

Aayush Shrivastava

unread,
Nov 3, 2025, 3:50:05 PM (2 days ago) Nov 3
to Wazuh | Mailing List
Dear Wazuh Community,Iwant to configure email notification, but can Ido it withoust the sasl_paaswd means without passwordWe are currently facing an issue with email notifications from our Wazuh instance. Below is a brief summary of our configuration and the problem we’re encountering:SMTP Server :sm...@xyz.inPort: 25Wazuh Configuration:Configured in /etc/ossec.conf with <smtp_server> and <smtp_port> set appropriately.<global><jsonout_output>yes</jsonout_output><alerts_log>yes</alerts_log><logall>no</logall><logall_json>no</logall_json><email_notification>yes</email_notification><smtp_server>localhost</smtp_server><email_from>al...@xyx.in</email_from><email_to>rec...@xyz.in</email_to><email_maxperhour>12</email_maxperhour><email_log_source>alerts.log</email_log_source><agents_disconnection_time>10m</agents_disconnection_time><agents_disconnection_alert_time>0</agents_disconnection_alert_time><update_check>yes</update_check></global>Postfix Configuration:The main.cf file points to the relayhost without SASL authentication.relayhost = [smtp.xyz.in]:25smtp_use_tls = yessmtp_sasl_auth_enable = nosmtp_sasl_password_maps =smtp_sasl_security_options =Any guidance or best practices would be greatly appreciated.Best regards,

fabio.c...@wazuh.com

unread,
Nov 3, 2025, 11:27:40 PM (2 days ago) Nov 3
to Wazuh | Mailing List

Hello Aayush,

Your setup should work. Wazuh does not support SMTP authentication directly, so using Postfix as a relay is the correct method. As long as the external SMTP server allows relay from your server on port 25 without auth, this configuration is valid.

If you still have issues, you can verify the following:

  • Test sending mail manually via Postfix to confirm the relay is functioning: echo "test" | mail -s "test email" your...@domain.com
  • Check Wazuh logs in /var/ossec/logs/ossec.log (look for messages from wazuh-maild)
  • Confirm <smtp_server> in ossec.conf is set to localhost (Postfix), not the external SMTP directly.

If Postfix can send without password, then Wazuh will send without password as well.

Regards,

Reply all
Reply to author
Forward
0 new messages