Difference between revisions of "Tripwire: Notifikasi e-mail"
Jump to navigation
Jump to search
Onnowpurbo (talk | contribs) |
Onnowpurbo (talk | contribs) |
||
| Line 29: | Line 29: | ||
MAILMETHOD =SMTP | MAILMETHOD =SMTP | ||
SMTPHOST =smtp.telkom.net | SMTPHOST =smtp.telkom.net | ||
| + | SMTPHOST =222.124.18.79 (kalau mau aman) | ||
SMTPPORT =25 | SMTPPORT =25 | ||
| Line 34: | Line 35: | ||
twadmin -m F -e /etc/tripwire/twcfg.txt | twadmin -m F -e /etc/tripwire/twcfg.txt | ||
| − | |||
==Test e-mail message== | ==Test e-mail message== | ||
Revision as of 10:38, 24 January 2011
Kita dapat melaporkan kejadian menggunakan tripwire dan ini harus ditulis pada file Tripwire
/etc/tripwire/twpol.txt
contoh e-mail admin bob@domain.com;sam@domain.com
( rulename = "Networking Programs", severity = $(SIG_HI), emailto = bob@domain.com;sam@domain.com )
Setelah selesai dimasukan lakukan
tripwire -m p /etc/tripwire/twpol.txt
atau
twadmin -m P -e /etc/tripwire/twpol.txt
Konfigurasi SMTP Server
Edit
vi /etc/tripwire/twcfg.txt
Pastikan misalnya
MAILMETHOD =SMTP SMTPHOST =smtp.telkom.net SMTPHOST =222.124.18.79 (kalau mau aman) SMTPPORT =25
Update file configurasi tripwire
twadmin -m F -e /etc/tripwire/twcfg.txt
Test e-mail message
Untuk mentest notifikasi e-mail kita dapat mengunakan perintah berikut
/usr/sbin/tripwire --test --email your@email.address
Test e-mail akan dikirim langsung ke e-mail address oleh tripwire