[Snortsam-discussion] snortsam not sending emails

Ondrej Pesta ondrej.pesta at idc.cz
Mon Aug 31 02:45:21 EDT 2009


Frank Knobbe wrote:
> On Fri, 2009-08-28 at 09:42 +0200, Ondrej Pesta wrote:
>   
>> I also tried witch sendmail. The result is more strange,  than with postfix.
>> Sendmail sent banner, but snortsam did nothing...
>>
>> #
>> T 192.168.1.33:25 -> 192.168.1.100:56972 [AP]
>>   220 oppsbook.in.idc.cz ESMTP Sendmail 8.14.3/8.14.3; Fri, 28 Aug 2009 
>> 09:38:31 +0200 
>> (CEST)..                                                                                                             
>>
>>     
>
> That's indeed odd, since the plugin waits for the 220 and 250 codes,
> which it obviously received here.
>
> What version of Snortsam are you using? And under what OS? Maybe try
> disabling multithreading by adding "nothreads" to the snortsam.conf and
> see if that makes a difference.
>   
It is strange, that when I run snortsam, it prints:

SnortSam, v 2.56.
Copyright (c) 2001-2008 Frank Knobbe <frank at knobbe.us>. All rights reserved.

It is installed on FreeBSD 7.2 from port /usr/ports/security/snortsam.
There is written it is version 2.60 and also downloaded sources are 
snortsam-src-2.60.tar.gz.
I will try to disable threads.

> Regards,
> Frank
>
>
> _______________________________________________
> Snortsam-discussion mailing list
> Snortsam-discussion at snortsam.net
> http://lists.snortsam.net/mailman/listinfo/snortsam-discussion
>
>   


More information about the Snortsam-discussion mailing list