| View previous topic :: View next topic |
| Author |
Message |
NiceGuy
Guru
Joined: 12 Jun 2006
Posts: 451
Location: Canada
|
 Posted: Mon Apr 28, 2014 10:53 pm Post subject: PSAD Email Sender Configuration |
 |
|
Hello Gentoo Community,
I have recently installed PSAD for intrusion detection on my Gentoo Linux machine, and I have configured
the my email configuration for alerts in the /etc/psad/psad.conf:
| Code: | | EMAIL_ADDRESSES address1@domain.com |
However, this parameter only configures the email addresses you would like to notify when a report
is generated (to/recipient address).
However, I have a requirement within our system to also to configure the sender (from address)
for the outgoing psad alerts.
Does anyone within the community know how I can achieve this?
_________________
success is the ability to go from one failure to the next without any loss of enthusiasm |
|
| Back to top |
|
 |
NiceGuy
Guru
Joined: 12 Jun 2006
Posts: 451
Location: Canada
|
| Posted: Wed Apr 30, 2014 10:29 pm Post subject: |
|
|
Any takers?
_________________
success is the ability to go from one failure to the next without any loss of enthusiasm |
|
| Back to top |
|
|
khayyam
Watchman
Joined: 07 Jun 2012
Posts: 6227
Location: Room 101
|
| Posted: Thu May 01, 2014 1:13 am Post subject: |
|
|
NiceGuy ... well, given the following you'd think there would be ...
| psad documentation wrote: | DSHIELD_USER_EMAIL
Defines the source email address that will be used to send scan data to the DShield distributed IDS. The default is "NONE" which allows psad to send scan information to DShield from the same source email address that is used by psad to send normal scan alerts. |
... I took a look at the sources but see nothing, my guess is this default will be $USER (of the process) @ hostname ... but there doesn't look to be a method to configure it.
best ... khay |
|
| Back to top |
|
|
|
Networking & Security
