Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
PSAD Email Sender Configuration
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
NiceGuy
Guru
Guru


Joined: 12 Jun 2006
Posts: 451
Location: Canada

PostPosted: Mon Apr 28, 2014 10:53 pm    Post subject: PSAD Email Sender Configuration Reply with quote

Hello Gentoo Community,

I have recently installed PSAD for intrusion detection on my Gentoo Linux machine, and I have configured
the my email configuration for alerts in the /etc/psad/psad.conf:

Code:
EMAIL_ADDRESSES     address1@domain.com


However, this parameter only configures the email addresses you would like to notify when a report
is generated (to/recipient address).

However, I have a requirement within our system to also to configure the sender (from address)
for the outgoing psad alerts.

Does anyone within the community know how I can achieve this?
_________________
success is the ability to go from one failure to the next without any loss of enthusiasm
Back to top
View user's profile Send private message
NiceGuy
Guru
Guru


Joined: 12 Jun 2006
Posts: 451
Location: Canada

PostPosted: Wed Apr 30, 2014 10:29 pm    Post subject: Reply with quote

Any takers?
_________________
success is the ability to go from one failure to the next without any loss of enthusiasm
Back to top
View user's profile Send private message
khayyam
Watchman
Watchman


Joined: 07 Jun 2012
Posts: 6228
Location: Room 101

PostPosted: Thu May 01, 2014 1:13 am    Post subject: Reply with quote

NiceGuy ... well, given the following you'd think there would be ...

psad documentation wrote:
DSHIELD_USER_EMAIL
Defines the source email address that will be used to send scan data to the DShield distributed IDS. The default is "NONE" which allows psad to send scan information to DShield from the same source email address that is used by psad to send normal scan alerts.

... I took a look at the sources but see nothing, my guess is this default will be $USER (of the process) @ hostname ... but there doesn't look to be a method to configure it.

best ... khay
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum