LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 05-08-2001, 07:41 PM   #1
ak47fred
LQ Newbie
 
Registered: May 2001
Posts: 9

Rep: Reputation: 0

Tripwire's emailto option is not working for me. In the policy file for each rules section I have:



(

rulename = "Tripwire Data Files",

severity = $(SIG_HI),

emailto = "myname@mydomain.com"

)



the program is being called with: tripwire --check --email-report



After several tries, I added (to the @@global section of my policy)

emailto = "myname@mydomain.com" to no avail.



Redhat Linux 7.1 - Tripwire 2.3.0.50



Thanks!
 
Old 05-08-2001, 09:29 PM   #2
ak47fred
LQ Newbie
 
Registered: May 2001
Posts: 9

Original Poster
Rep: Reputation: 0
Just to add, the tripwire --test option handled email w/o problems.
 
Old 07-08-2001, 10:14 PM   #3
restauffer
LQ Newbie
 
Registered: Jul 2001
Posts: 1

Rep: Reputation: 0
Did you ever get this problem solved? I have worked on the same problem for some time and have not solved the problem with it not recognizing emailto lines in the policy file. When I look at the screen output, it always says "No email recipients specified, no email sent." even though they are there.

I did find a workaround solution. I put the following line in the twcfg.txt file:

GLOBALEMAIL = user@domain.com

and now emails get sent to "user@domain.com. This doesn't allow sending individual emails per each rule but at least I am getting one email sent.

If you have suceeded in fixing the problem, please let me know how you solved it.

Thanks
 
Old 08-04-2004, 03:10 PM   #4
TGgirl
LQ Newbie
 
Registered: Aug 2004
Posts: 2

Rep: Reputation: 0
Yes, there is a way for this to work by entering the command:
tripwire --check --email-report

This should email the report to the designated recipient in the policy file


I had your same problem and could not figure out why the recipient was not getting the reports when I would just enter the command:

tripwire --check
 
Old 08-04-2004, 03:14 PM   #5
TGgirl
LQ Newbie
 
Registered: Aug 2004
Posts: 2

Rep: Reputation: 0
Also - you have to make sure that sendmail is up and working if that is what you have in your configuration file for MAILMETHOD.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
tripwire, where can I get it? linuxistan Linux - Networking 1 10-19-2004 10:12 PM
I need tripwire help Darkangel90 Slackware 2 04-22-2004 01:15 AM
Tripwire brokenflea Linux - Security 2 03-02-2004 01:07 PM
tripwire reports /usr/sbin/tripwire changed alfaalfabeta Linux - Security 5 07-22-2003 05:52 PM
Tripwire? janderson622 Linux - Security 2 05-01-2001 12:33 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 10:05 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration