Geekido

I have several sites that use OSSEC HIDS. For a variety of reasons I won’t go into here, I do not have a central server with agents. Instead, each server has its own local installation, each e-mailing back to the same e-mail account. I set the e-mail from for each server to report the domain name sending it, but the display name is hard coded to be OSSEC HIDS. This means that for certain mail clients I have a lot of emails from “OSSEC HIDS” with no immediate way of telling the source.

There are a lot of ways to work around this, but I just wanted a quick hack to the display name so I could take this one off my list and move on. It turns out to be easy to do even if you don’t have a lot of development skill.

(continue reading…)