[ossec-list] Re: OSSEC 0.9 Cannot send email

[Peter Ahlert <peter@xxxxxxx>]

Hi Chuck,

I had this problem using qmail some time ago. I fixed it by wrapping with http://cr.yp.to/ucspi-tcp.html.

There is a patch to address the problem in qmail (http://www.arctic.org/~dean/patches/qmail-0.95-liberal-lf.patch) - NOT TESTED

peter



On Tue, 08 Aug 2006 13:27:48 -0400
chuck <frosted@xxxxxxxxxxxxxx> wrote:

> 
> I tried using the actual IP address of the machine, in addition to 
> 127.0.0.1, and localhost, nothing seems to work :(  I found the code 
> which generates this message and it appears that the response received 
> after sending in the "\n\r.\n\r" is either null or not 250.  Has anyone 
> had similar experience or uses qmail as their SMTP server?
> 
> thanks,
> chuck
> 
> swbradley1@xxxxxxxxxxxxxxxxxxxxxxxx wrote:
> > When I started I had a similar problem.
> >
> > I used that actual IP address instead of locahost or 127.0.0.1 and that
> > worked for me.
> >
> > steve
> >
> >
> >   
> >> Hi,
> >> I just recently installed ossec 0.9 on Redhat Linux and I am getting the
> >> following errors in the logs:
> >> 2006/08/08 09:58:44 os_sendmail(1707): End of DATA not accepted by server
> >> 2006/08/08 09:58:44 ossec-maild(1223): Error Sending email to 127.0.0.1
> >> (smtp server)
> >>
> >> I checked the source and it seems that the email server is not receiving
> >> a satisfactory "250" message from my local SMTP server, which happens to
> >> be qmail.  I tried telnetting locally to 25 and sent off a test email
> >> without problems, so it's not asking for authentication.  Here is the
> >> relevant ossec.conf entries:
> >>
> >>   <global>
> >>     <email_notification>yes</email_notification>
> >>     <email_to>chuck@xxxxxxxxxxxxx</email_to>
> >>     <smtp_server>localhost</smtp_server>
> >>     <email_from>ossecm@xxxxxxxxxxxxxx</email_from>
> >>   </global>
> >>
> >> The server is running on localhost and the type of installation of ossec
> >> is local.  Please let me know if I missed something or if you need
> >> further information.
> >>
> >> thank you,
> >> chuck
> >>
> >>
> >>     
> >
> >
> >
> >   


-- 
=========================================================================
	Peter Ahlert				 peter@xxxxxxx
==== We are Microsoft. You will be assimilated. Resistance is futile ====