From owner-freebsd-questions@freebsd.org Fri May 17 15:14:24 2019 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id F0B1E15977D7 for ; Fri, 17 May 2019 15:14:23 +0000 (UTC) (envelope-from rwmaillists@googlemail.com) Received: from mail-wr1-x435.google.com (mail-wr1-x435.google.com [IPv6:2a00:1450:4864:20::435]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id A94D37703D for ; Fri, 17 May 2019 15:14:22 +0000 (UTC) (envelope-from rwmaillists@googlemail.com) Received: by mail-wr1-x435.google.com with SMTP id r7so7486955wrr.13 for ; Fri, 17 May 2019 08:14:22 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:subject:message-id:in-reply-to :references:mime-version:content-transfer-encoding; bh=34aOZZJN7NchuXg3RiWIoVD2QFRMYvSfCS91EdUswJY=; b=aAtls+Nz88WVVjf1qftxLMav82FmKK7PBGTYNvv3cRX1Rgtglty0rJuft0Tch5fDHP Mutn7oZsfG9//AK1OGjHupx/TAs/9GW8S+UaTqGSvaPFwVCfNzbIY+fKySQWY69IhAqP uqbm5635OocFdhc+HsNjqaq3bcpKE+Uk9GxTKNjMvHdgeLuact1UNVquqkVXQLiWCXbM 3riWAwk0EgsZyYy2qs9F3NKU6N97o7NTu/WMqtkFwr0KjxHFz6a54E/yBrw1ft95UKEQ o0zt5fEblD/NLH/1fJ5pX/cHUiPMX46CWqqP5qWPptWrvfC/7+KMVvwWORsRvSPStuW4 svGg== X-Gm-Message-State: APjAAAXpvJnveMlUQb39AH00DJKEa69izY6Bh8q0MSEeEeHE3xU3+yHK OZI96DmgRVb1xJnbFWlpzVo+0UdI X-Google-Smtp-Source: APXvYqx1ctLBTczKFKyYhnY5lUnYouAtvT/73Mk3++3/81IzoFJ4hOr9uHxjl4mab8L6Gb7TzD6/8A== X-Received: by 2002:adf:dcc8:: with SMTP id x8mr15732065wrm.3.1558106061230; Fri, 17 May 2019 08:14:21 -0700 (PDT) Received: from gumby.homeunix.com ([2.121.235.191]) by smtp.gmail.com with ESMTPSA id i17sm9475508wrr.46.2019.05.17.08.14.19 for (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Fri, 17 May 2019 08:14:20 -0700 (PDT) Date: Fri, 17 May 2019 16:14:16 +0100 From: RW To: freebsd-questions@freebsd.org Subject: Re: Encrypt PGP daily security email Message-ID: <20190517161416.5d9f46b9@gumby.homeunix.com> In-Reply-To: <84854f84-f981-41cd-c7f9-a77b4245733f@aol.com> References: <84854f84-f981-41cd-c7f9-a77b4245733f@aol.com> X-Mailer: Claws Mail 3.17.3 (GTK+ 2.24.32; amd64-portbld-freebsd12.0) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Rspamd-Queue-Id: A94D37703D X-Spamd-Bar: ------ X-Spamd-Result: default: False [-6.78 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; R_SPF_ALLOW(-0.20)[+ip6:2a00:1450:4000::/36]; FREEMAIL_FROM(0.00)[googlemail.com]; TO_DN_NONE(0.00)[]; RCVD_COUNT_THREE(0.00)[3]; DKIM_TRACE(0.00)[googlemail.com:+]; DMARC_POLICY_ALLOW(-0.50)[googlemail.com,quarantine]; MX_GOOD(-0.01)[alt3.gmail-smtp-in.l.google.com,alt4.gmail-smtp-in.l.google.com,gmail-smtp-in.l.google.com,alt2.gmail-smtp-in.l.google.com,alt1.gmail-smtp-in.l.google.com]; NEURAL_HAM_SHORT(-0.99)[-0.989,0]; RECEIVED_SPAMHAUS_PBL(0.00)[191.235.121.2.zen.spamhaus.org : 127.0.0.10]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; FREEMAIL_ENVFROM(0.00)[googlemail.com]; ASN(0.00)[asn:15169, ipnet:2a00:1450::/32, country:US]; DWL_DNSWL_NONE(0.00)[googlemail.com.dwl.dnswl.org : 127.0.5.0]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; R_DKIM_ALLOW(-0.20)[googlemail.com:s=20161025]; URIBL_BLOCKED(0.00)[googlemail.com.multi.uribl.com]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.10)[text/plain]; RCVD_TLS_LAST(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org]; RCPT_COUNT_ONE(0.00)[1]; IP_SCORE(-2.78)[ip: (-9.38), ipnet: 2a00:1450::/32(-2.20), asn: 15169(-2.27), country: US(-0.06)]; RCVD_IN_DNSWL_NONE(0.00)[5.3.4.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.5.4.1.0.0.a.2.list.dnswl.org : 127.0.5.0] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 May 2019 15:14:24 -0000 On Thu, 16 May 2019 10:45:02 +0200 xpetrl via freebsd-questions wrote: > Dear All, > > I'm receiving every night the daily security output per email; > the server is host only and uses ssmpt with a smtp relay. > > Is there a way to encrypt that email? Probably. It's actually simpler to do this if the security report is configured to be inline in daily. In that case you can set daily_output="" in periodic.conf. That should cause the output to go to stdout, and you can pipe that to a script by changing the entry in /etc/crontab to something like # Perform daily/weekly/monthly maintenance. 1 3 * * * root periodic daily 2>&1 | yourscript When security is not inline it's more complicated as 'periodic security' is run from /etc/periodic/daily/450.status-security. In order to handle the security report separately you would need to disable this and run 'periodic security' directly from crontab with the appropriate: XXX_output="" I'm not sure what XXX would be there, probably just "security", 450.status-security uses daily_status_security_output, but there may be something in /etc/defaults/periodic.conf that sets security_output from that.