Arch Linux

avlouis

Member

Registered: 2017-02-25

Posts: 4

Arpwatch and SSMTP - Change recipient

Arpwatch and SSMTP keep trying to send emails to arpwatch@gmail.com.
I cannot find any documentation on the arch version of this package.
Does anyone have any insight on how to get the emails sent to a specific address?

x33a

Forum Fellow

Registered: 2009-08-15

Posts: 4,587

Re: Arpwatch and SSMTP - Change recipient

Post the contents of your Arpwatch configuration file.

Moving to NC.

avlouis

Member

Registered: 2017-02-25

Posts: 4

Re: Arpwatch and SSMTP - Change recipient

I don't have an arpwatch configuration file.
There is no configuration installed with the package.  The man page for arpwatch does not mention any option for configuration files or any default location.  There is no wiki article for arpwatch.
Basically, if I had documentation for this program, I would be able to figure this out.  I am hoping somebody experienced will share some info with me.
The only options I have set are in the systemd service.  Using -f I specify a data file and -i I specify the interface.
All other behavior should be default.

oliver

Member

Registered: 2007-12-12

Posts: 448

Re: Arpwatch and SSMTP - Change recipient

Don't know how accurate this is, but take a look at http://www.virtualizationhowto.com/2016 … iguration/

Also maybe run strace on it to see what files it's looking for

avlouis

Member

Registered: 2017-02-25

Posts: 4

Re: Arpwatch and SSMTP - Change recipient

I have inspected that document before.  The -m option is not supported by the Arch arpwatch package.
strace is a good thought.  The only files opened are libraries by the loader.
I suppose I should have just broken down and inspected the source sooner.
The source used by the arch package has hard coded sender and receiver addresses.
So if I am able to get this working with the current package, it will be solved in SSMTP.

#
# /etc/ssmtp.conf -- a config file for sSMTP sendmail.
#
# The person who gets all mail for userids < 1000
# Make this empty to disable rewriting.
root=me@gmail.com #actual sender email address here
# The place where the mail goes. The actual machine name is required
# no MX records are consulted. Commonly mailhosts are named mail.domain.com
# The example will fit if you are in domain.com and you mailhub is so named.
mailhub=smtp.gmail.com:587
# Where will the mail seem to come from?
# rewriteDomain=gmail.com
# The full hostname
hostname=localhost

# Use SSL/TLS before starting negotiation
UseTLS=Yes
UseSTARTTLS=Yes

# Username/Password
AuthUser=me #actual sender name here
AuthPass=password #actual sender password here
AuthMethod=LOGIN

# Email 'From header's can override the default domain?
FromLineOverride=yes

/etc/ssmttp/revaliases

# sSMTP aliases
# 
# Format:	local_account:outgoing_address:mailhub
#
# Example: root:your_login@your.domain:mailhub.your.domain[:port]
# where [:port] is an optional port number that defaults to 25.

root:you@gmail.com:smtp.gmail.com:587 #actual receiver address
arpwatch:you@gmail.com:smtp.gmail.com:587 #actual receiver address

Basically I want me@gmail.com to send to you@gmail.com.  Currently me@gmail.com attempts to send to arpwatch (with rewrite domain off empty) or arpwatch@gmail.com (with rewrite domain set to gmail.com).

x33a

Forum Fellow

Registered: 2009-08-15

Posts: 4,587

Re: Arpwatch and SSMTP - Change recipient

The -m option is not supported by the Arch arpwatch package.

Hmm.. that is strange. I'll go ahead and move the thread back to "Networking, Server, and Protection".

avlouis

Member

Registered: 2017-02-25

Posts: 4

Re: Arpwatch and SSMTP - Change recipient

I did a little more digging into this.

Don't know how accurate this is, but take a look at http://www.virtualizationhowto.com/2016 … iguration/

Of course apt-get makes me think Ubuntu and Debian.

http://packages.ubuntu.com/xenial/arpwatch

It looks like Ubuntu (and probably Debian) uses a patched version of the program.
Most notably, it includes a patch "14opt_mailto" that provides the -m option.
So I guess I have a few options here:
1. I figure out (with help) how to get SSMTP to work how I want.
2. We look into either adding or switching to the patched version of arpwatch in the repos.
3. I compile the patched version myself and deal with performing manual updates.

x33a

Forum Fellow

Registered: 2009-08-15

Posts: 4,587

Re: Arpwatch and SSMTP - Change recipient

Getting the patched version in the repos is unlikely. One option is to open a bug report against arpwatch on our bug tracker and explain the situation there. If the maintainer agrees, then you are in luck. Otherwise it should be easy enough to maintain a patched version in the AUR.