Snort mailing list archives

Re: Acid Email Alerts


From: "Jon Baer" <security () jonbaer net>
Date: Fri, 20 Jun 2003 14:40:45 -0700

try opening acid_action.inc file and locate the Action_email_alert_post()
method (line 681) ... add it in ... im not sure why/where it was originally
suppose to be defined.

$action_email_from = "security () myhost com";

- jon

pgp key: http://www.jonbaer.net/jonbaer.asc
fingerprint: F438 A47E C45E 8B27 F68C 1F9B 41DB DB8B 9A0C AF47


----- Original Message ----- 
From: "Jon Quiros" <jq_snort_users () teahead net>
To: <snort-users () lists sourceforge net>
Sent: Friday, June 20, 2003 2:02 PM
Subject: Re: [Snort-users] Acid Email Alerts


Brian Gregorcy wrote:
ya, I toyed with getting alerts to send out when they came in but it
never
worked correctly.  Also, just to get the alerts to send out when you hit
the
button required me to play with sendmail.  I'm a solaris newb so that is
probably the reason why I never got it to work correctly.

If anyone knows of a way I would also love to hear it.


b


it's not a relaying denied thing.  i haven't looked into where acid
grabs the "from:" field, but on my machine it tries to send mail as
"www@localhost".  i added "localhost" to sendmail's relay-domains file
but no go.

my next step would be to change the "mail" directive in php.ini but i
don't want to yet because other php stuff on this machine sends mail and
they work fine.  i just need to find a good time window to try it real
quick.

i'd try "sendmail -i -f etc..." instead of stock "sendmail" next because
awhile ago when i searched for this solution i read in the archives that
for someone "-f pepelopezenacidos () poray not" (replace
"pepelopezenacidos () poray not" w/ the "from:" address you want to use)
worked.

in, short, i'd be interested in seeing what fixes your mail from acid
problem.



-------------------------------------------------------
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




-------------------------------------------------------
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: