[Snort-users] Acid Email Alerts

Jon Baer security at ...9153...
Fri Jun 20 14:41:26 EDT 2003


try opening acid_action.inc file and locate the Action_email_alert_post()
method (line 681) ... add it in ... im not sure why/where it was originally
suppose to be defined.

$action_email_from = "security at ...2686...";

- jon

pgp key: http://www.jonbaer.net/jonbaer.asc
fingerprint: F438 A47E C45E 8B27 F68C 1F9B 41DB DB8B 9A0C AF47


----- Original Message ----- 
From: "Jon Quiros" <jq_snort_users at ...6668...>
To: <snort-users at lists.sourceforge.net>
Sent: Friday, June 20, 2003 2:02 PM
Subject: Re: [Snort-users] Acid Email Alerts


> Brian Gregorcy wrote:
> > ya, I toyed with getting alerts to send out when they came in but it
never
> > worked correctly.  Also, just to get the alerts to send out when you hit
the
> > button required me to play with sendmail.  I'm a solaris newb so that is
> > probably the reason why I never got it to work correctly.
> >
> > If anyone knows of a way I would also love to hear it.
> >
> >
> > b
> >
>
> it's not a relaying denied thing.  i haven't looked into where acid
> grabs the "from:" field, but on my machine it tries to send mail as
> "www at ...274...".  i added "localhost" to sendmail's relay-domains file
> but no go.
>
> my next step would be to change the "mail" directive in php.ini but i
> don't want to yet because other php stuff on this machine sends mail and
> they work fine.  i just need to find a good time window to try it real
> quick.
>
> i'd try "sendmail -i -f etc..." instead of stock "sendmail" next because
> awhile ago when i searched for this solution i read in the archives that
> for someone "-f pepelopezenacidos at ...9532..." (replace
> "pepelopezenacidos at ...9532..." w/ the "from:" address you want to use)
> worked.
>
> in, short, i'd be interested in seeing what fixes your mail from acid
> problem.
>
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by: INetU
> Attention Web Developers & Consultants: Become An INetU Hosting Partner.
> Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
> INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>





More information about the Snort-users mailing list