[Snort-users] Acid Email Alerts
security at ...9153...
Fri Jun 20 14:41:26 EDT 2003
try opening acid_action.inc file and locate the Action_email_alert_post()
method (line 681) ... add it in ... im not sure why/where it was originally
suppose to be defined.
$action_email_from = "security at ...2686...";
pgp key: http://www.jonbaer.net/jonbaer.asc
fingerprint: F438 A47E C45E 8B27 F68C 1F9B 41DB DB8B 9A0C AF47
----- Original Message -----
From: "Jon Quiros" <jq_snort_users at ...6668...>
To: <snort-users at lists.sourceforge.net>
Sent: Friday, June 20, 2003 2:02 PM
Subject: Re: [Snort-users] Acid Email Alerts
> Brian Gregorcy wrote:
> > ya, I toyed with getting alerts to send out when they came in but it
> > worked correctly. Also, just to get the alerts to send out when you hit
> > button required me to play with sendmail. I'm a solaris newb so that is
> > probably the reason why I never got it to work correctly.
> > If anyone knows of a way I would also love to hear it.
> > b
> it's not a relaying denied thing. i haven't looked into where acid
> grabs the "from:" field, but on my machine it tries to send mail as
> "www at ...274...". i added "localhost" to sendmail's relay-domains file
> but no go.
> my next step would be to change the "mail" directive in php.ini but i
> don't want to yet because other php stuff on this machine sends mail and
> they work fine. i just need to find a good time window to try it real
> i'd try "sendmail -i -f etc..." instead of stock "sendmail" next because
> awhile ago when i searched for this solution i read in the archives that
> for someone "-f pepelopezenacidos at ...9532..." (replace
> "pepelopezenacidos at ...9532..." w/ the "from:" address you want to use)
> in, short, i'd be interested in seeing what fixes your mail from acid
> This SF.Net email is sponsored by: INetU
> Attention Web Developers & Consultants: Become An INetU Hosting Partner.
> Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
> INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> Snort-users list archive:
More information about the Snort-users