[Snort-users] Acid Email Alerts

Jon Quiros jq_snort_users at ...6668...
Fri Jun 20 14:52:05 EDT 2003


Um,

I was talking about getting ACID to "email alerts" when you want it to, 
when you CLICK ON THE BUTTON, like it should.  on some config it was 
working fine for me, but then my config has been through so many changes 
I don't remember what broke it.  probably a sendmail patch or the like....



Jon Baer wrote:
> try opening acid_action.inc file and locate the Action_email_alert_post()
> method (line 681) ... add it in ... im not sure why/where it was originally
> suppose to be defined.
> 
> $action_email_from = "security at ...2686...";
> 
> - jon
> 
> pgp key: http://www.jonbaer.net/jonbaer.asc
> fingerprint: F438 A47E C45E 8B27 F68C 1F9B 41DB DB8B 9A0C AF47
> 
> 
> ----- Original Message ----- 
> From: "Jon Quiros" <jq_snort_users at ...6668...>
> To: <snort-users at lists.sourceforge.net>
> Sent: Friday, June 20, 2003 2:02 PM
> Subject: Re: [Snort-users] Acid Email Alerts
> 
> 
> 
>>Brian Gregorcy wrote:
>>
>>>ya, I toyed with getting alerts to send out when they came in but it
>>
> never
> 
>>>worked correctly.  Also, just to get the alerts to send out when you hit
>>
> the
> 
>>>button required me to play with sendmail.  I'm a solaris newb so that is
>>>probably the reason why I never got it to work correctly.
>>>
>>>If anyone knows of a way I would also love to hear it.
>>>
>>>
>>>b
>>>
>>
>>it's not a relaying denied thing.  i haven't looked into where acid
>>grabs the "from:" field, but on my machine it tries to send mail as
>>"www at ...274...".  i added "localhost" to sendmail's relay-domains file
>>but no go.
>>
>>my next step would be to change the "mail" directive in php.ini but i
>>don't want to yet because other php stuff on this machine sends mail and
>>they work fine.  i just need to find a good time window to try it real
>>quick.
>>
>>i'd try "sendmail -i -f etc..." instead of stock "sendmail" next because
>>awhile ago when i searched for this solution i read in the archives that
>>for someone "-f pepelopezenacidos at ...9532..." (replace
>>"pepelopezenacidos at ...9532..." w/ the "from:" address you want to use)
>>worked.
>>
>>in, short, i'd be interested in seeing what fixes your mail from acid
>>problem.
>>
>>
>>
>>-------------------------------------------------------
>>This SF.Net email is sponsored by: INetU
>>Attention Web Developers & Consultants: Become An INetU Hosting Partner.
>>Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
>>INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php
>>_______________________________________________
>>Snort-users mailing list
>>Snort-users at lists.sourceforge.net
>>Go to this URL to change user options or unsubscribe:
>>https://lists.sourceforge.net/lists/listinfo/snort-users
>>Snort-users list archive:
>>http://www.geocrawler.com/redir-sf.php3?list=snort-users
>>
> 
> 
> 
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by: INetU
> Attention Web Developers & Consultants: Become An INetU Hosting Partner.
> Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
> INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users






More information about the Snort-users mailing list