Securing Your Server With A Host-based Intrusion Detection System - OSSEC HIDS

[bruma]

I installed OSSEC HIDS but ISPconfig SPAM filter is marking all OSSEC HIDS mails as spam.

Mail Subject: ***SPAM*** OSSEC Notification - server1 - Alert level 7

How can I prevent that?

[falko]

From which domain are you sending? Is it localhost (root@localhost or root@localhost.localdomain or something like that)? You might need to change the domain and also provide a SPF record for that domain.

You can also have a look at the header of the OSSEC mails. SpamAssassin writes what tests returned how many points.