Arpwatch not being able to send email notifications



  • The arpwatch package is nearly useless if it can't be configured to send email alerts when the arp table changes.
    I have installed it, and judging from the logs it is indeed trying to send alerts when the arp table changes, but failing to find sendmail in the system.
    Now, there is no sendmail package (or equivalent) in pfsense, and the generic freebsd ones will probably need some effort in order to work in pfsense.
    Can anyone help me with this?


  • Rebel Alliance Developer Netgate

    We don't include sendmail on purpose. Though if you install one of the packages that contains postfix (like mailscanner) it may put enough on the box to let that function.



  • I understand and appreciate that.
    That said, wouldn't it be great if someone with adequate skills (which I am not, sadly) could modify the arpwatch package so that it plugs in to the builtin email reporting facility in pfsense, instead of requiring a smtp daemon? That would be the best solution.



  • @jimp:

    We don't include sendmail on purpose.

    Will you consider adding this as an option in future versions?
    For me, arpwatch is nearly useless without it…


  • Rebel Alliance Developer Netgate

    sendmail? No. Never.

    There are packages that add an MTA (like mailscanner) but they aren't generally recommended.

    If you just need to send mail, 2.1 has a CLI program mail.php that will take input from stdin and send it using the configured notification e-mail settings.



  • If u want a small application, u can try ssmtp.



  • @jimp:

    sendmail? No. Never.

    Personally, I'm a "Windows man", so a lot of these pfSense related things are hard for me to know if they are pfSense-spesific or standard for unix based systems.
    Am I right to assume that "sendmail" is a common feature, and thus not a natural part of arpwatch?

    @jimp:

    If you just need to send mail, 2.1 has a CLI program mail.php that will take input from stdin and send it using the configured notification e-mail settings.

    Isn't the problem here that arpwatch doesn't do anything towards notifications?
    I might be on thin ice here, but what I'm trying to achieve is to get some sort of notification each time a new IP is logged in arpwatch.
    If this can be achieved with mail.php, could you give a clue as to how I should proceed to reach my goal?
    (The pfSense notifications have been configured, and test emails (and growls) are arriving as expected.)


Log in to reply