[Snort-users] Problem emailing alerts from ACID

Robin Brown robin_brown at ...6115...
Tue Jun 18 06:08:09 EDT 2002

I seem to remember initially having a similar issue.  I ended up using
this in php.ini:

sendmail_path =/usr/lib/sendmail -t


Message: 3
From: "Bradley, Paul" <paulb at ...4318...>
To: "'snort-users at lists.sourceforge.net'"
	 <snort-users at lists.sourceforge.net>
Subject: RE:  [Snort-users] Problem emailing alerts from ACID
Date: Mon, 17 Jun 2002 20:29:36 -0600

Thanks for your replies...As stated in my original message, RedHat 7.2
the OS running on the box.  Sendmail IS installed the on machine.  I can
send mail form the command line from the machine with no problems.  I
checked the ACID FAQ's and all it states is to place the full path to
sendmail in the php.ini file.


FROM: Ronneil CamaraDATE: 06/17/2002 14:37:08SUBJECT: RE:  [Snort-users]
Problem emailing alerts from ACID  -----Original Message-----
> From: Bradley, Paul [mailto:<EMAIL: PROTECTED>]
> Sent: Monday, June 17, 2002 9:31 AM
> Subject: [Snort-users] Problem emailing alerts from ACID
> Using SNORT 1.8.6 w/ ACID 0.9.6b21 running on RedHat 7.2.
> Upon attempting to email summary of events from ACID, I get 
> the following
> error:
> "EXPORT ERROR: Could not send exported alerts to 
> '<EMAIL: PROTECTED>'. Check the
> mail configuration in PHP.
> Successful EXPORT-summary - 5 alert(s)"
> I have checked the /usr/local/lib/php.ini file and verified:
> sendmail_path = '/usr/sbin/sendmail -t -i'
> However, I still cannot email the events.  Any suggestions?

What about sending mail from within the console of your ids box using
What o.s. are you running?


More information about the Snort-users mailing list