This is an old revision of the document!

Tripwire - Set Up Email Notifications

vi /etc/tripwire/twcfg.txt

and set the following fields

/etc/tripwire/twcfg.txt

MAILNOVIOLATIONS =true
EMAILREPORTLEVEL =3
REPORTLEVEL   =3
SYSLOGREPORTING =true
MAILMETHOD    =SMTP
SMTPHOST      =192.168.1.2
;SMTPHOST      =mail.sharewiz.net
SMTPPORT      =25

Another method

use the mail command to mail our notifications to our email address. This is not installed on our system currently, so we will have to download it from the repositories.

This gives us a great opportunity to see how tripwire reacts to changes in the system.

Install the files like this:

sudo apt-get install mailutils

Now that we have that command installed, let's do a test of our system's ability to mail out a tripwire report. This report will have warnings and changes too, since we just installed new software without telling tripwire:

sudo tripwire --check | mail -s "Tripwire report for `uname -n`" your_email@domain.com

You should receive a report shortly in your email with details about the new mail software you just installed