Re: [ossec-list] Redundancy manager (backup)

2017-04-11 Thread Victor Fernandez
Hi Martin, I'm glad to know that everything is OK. Your firewall configuration for the manager is good, filtering by source IP is fine. However the configuration for the agent should filter by source port, because we do not know which port the agent communicates from. I mean, the agent does

Re: [ossec-list] Redundancy manager (backup)

2017-04-11 Thread Martin
Hello, Thank you for your answers ! This is finaly working, what I had to do was to allow the traffic through 1514 with the following ; *On the agent :* - sudo iptables -D INPUT -j DROP - iptables -A INPUT -p UDP --dport 1514 -s 10.0.0.1 -j ACCEPT - iptables -A INPUT -p UDP --dport