F-SECURE LINUX SECURITY - Page 109

DescriptionElement
Specifies where the alerts are sent based on
their severity classification.
Alert Forwarding
The address of the SMTP server in the formServer
<host>[:<port>] where "host" is the DNS-name
or IP-address of the SMTP server, and "port"
is the SMTP server port number.
For details see RFC 2821 specification.
The sender's e-mail address to be put into theFrom
"From:" field of the e-mail message containing
the alert.
SMTP alert message subject. Besides the textSubject
the following symbols could be used:
- %SEVERITY% (informational, warning, error,
fatal error, security alert)
- %HOST_DNS% (DNS address of the host
that sent the alert)
- %HOST_IP% (IP address of the host that sent
the alert)
- %USER% (active user login name)
- %PRODUCT_NAME% (name of the product
that generated the alert)
- %PRODUCT_OID% (OID of the product that
generated the alert)
- %DESCRIPTION% (alert description)
- %DATE% (date when an alert sent in format
YYYY-MM-DD)
- %TIME% (time when an alert sent in format
HH:MM:SS+GMT)
- %ALERT_NUMBER% (alert number during
session)
F-Secure Linux Security | Advanced Web User Interface | 109