How To Set Email Alerts for SSH Root Login In Linux

To Set Email Alerts for SSH Root Login In Linux

While configuring Linux server, make sure that you should get a notification if any unauthorised login into root user. The server admin should get all email alerts from server. The procedure to set email alerts for SSH root login in Linux is explained.

 

Install the mailx package

Execute the following command to install mailx package.

[root@linuxhelp ~]# yum install mailx
Loaded plugins: aliases, changelog, fastestmirror, kabi, presto, refresh-packagekit, security, tmprepo,
              : verify, versionlock
Loading support for CentOS kernel ABI
Setting up Install Process
Loading mirror speeds from cached hostfile
 * base: centos.webwerks.com
 * epel: epel.mirror.net.in
.
.
.
Installing : mailx-12.4-8.el6_6.x86_64                                    1/1 
Verifying  : mailx-12.4-8.el6_6.x86_64                                    1/1 

Installed:
  mailx.x86_64 0:12.4-8.el6_6                                                   

Complete!

 

Go to /root directory and add the following statements in .bashrc file.

[root@linuxhelp ~]# vim .bashrc 

 

echo 'ALERT - Root Shell Access linuxhelp.com on:' `date` `who` | mail -s "Alert: Root Access"  corbyarun@gmail.com

 

.bashrc file


Enter your own server IP or Hostname and enter your valid mail-id.

 

Using ssh command, login to the configured server in terminal as root user.

root@linuxhelp:/home/user1# ssh root@192.168.5.83
root@192.168.5.83's password: 
Last login: Tue Jun 21 15:54:47 2016 from 192.168.5.137

 

A mail alert is sent to the respective mail-id, after the successful login.

mail alert

 

alert
To receive mail alert for multiple mail id's, add the following lines in the .bashrc file.

[root@linuxhelp ~]# vim .bashrc

 

echo 'ALERT - Root Shell Access linuxhelp.com on:' `date` `who` | mail -s "Alert: Root Access"  corbyarun@gmail.com, arunkumarece@gmail.com

.bashrc

 

Again login to the server through ssh command.

root@linuxhelp:/home/user1# ssh root@192.168.5.83
root@192.168.5.83's password: 
Last login: Tue Jun 21 15:56:47 2016 from 192.168.5.137

 

Open the mail and check the alert
mail

alert

root mail

alert message

 

Sometimes the mail will be stored in Spam.

 

 

 

 

To create alert for User login

 

Login as normal user. Go to user’s home directory and open the .bashrc file.

[root@linuxhelp ~]# cd /home/user1/
[root@linuxhelp user1]# vim .bashrc


.bashrc file
Once the configuration is done, logout that user and again login to check the mail alert.

user login mail
Alert message

 


Thank you! for using Linux Help.

You find this tutorial helpful? Share with your friends to keep it alive.
For more help topics browse our website www.linuxhelp.com
Be the first to comment, we value your suggestions. For further queries please comment below.

Tags: Email SSH
user image Author :  Ethan