search

BinaryDefense / artillery

The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.
1k stars 193 forks source link

alert email settings #105

Open Haotian-Shi-cyber opened 3 years ago

Haotian-Shi-cyber commented 3 years ago

i left the email setting "open relay", and i got this error image

oldkingcone commented 3 years ago

Looks like you got a connection refused from Googles' servers. This is a configuration error on the client side(your end).

Haotian-Shi-cyber commented 3 years ago

could you be more specific? i dont know how to fix it

russhaun commented 3 years ago

you have to use a valid username and password

Haotian-Shi-cyber commented 3 years ago

i used the correct username and password in config file, and i got emails alert but it shows tcp and udp ports i couldn't bind to.

Haotian-Shi-cyber commented 3 years ago

image also this

oldkingcone commented 3 years ago

did you follow the guide that gmail and google gives for external/custom email clients? because it doesnt sound like you followed the guide.

Haotian-Shi-cyber commented 3 years ago

it shouldn't be this problem cuz i received emails from smtp server but these emails are all telling me that unable to bind udp or tcp ports. image

oldkingcone commented 3 years ago

well yea, if the port is already in use you wont be able to bind a second program onto that port. Im confused here, are you trying to have a client send emails through googles smtp servers or are you trying to host your own smtp server?

Haotian-Shi-cyber commented 3 years ago

to be honest, i dont know how to let my honeypot send emails to my own email account, so literally the smtp account and password is my gmail account and then use it to send alerts to my another own email. （guess because honeypot hasn't got a email server on it not sure) btw how can i fix it.. been working it all day for my honours project much appreciated!!

oldkingcone commented 3 years ago

If i remember correctly, Google only allows specific user-agents or smtp clients to interact with or send email over their SMTP ports. I ran into this issue awhile ago, and had to refer back to googles guide on how to connect an smtp client to their smtp ports, and found they only really allow thunderbird or outlook. For the full implementation of an SMTP client, you may need to consult the RFC on SMTP to understand how the protocol works. https://support.google.com/mail/answer/7126229?hl=en

Haotian-Shi-cyber commented 3 years ago

i can receive the email alert as i said, in my outlook email account.. i dont know how to bind these ports if it is already in use. which set of commands i can type?

russhaun commented 3 years ago

in the ports section go through the list currently in the config file and see if there are any conflicting ports and remove them.

Haotian-Shi-cyber commented 3 years ago

yeah thx fixed, i killed the process