[ossec-list] Problem with rule 35051

2012-12-03 Thread Daniel Requena
Hi, I'm trying to customize the behavior of the rule 35051 (squid_rules.xml) in order to not have it fired if someone tries to access facebook website. This rule keeps annoying me, because Facebook like button is EVERYWHERE and my proxy server blocks it. I wrote this piece of

Re: [ossec-list] Problem with rule 35051

2012-12-04 Thread Daniel Requena
Rule: 35051 fired (level 10) - Multiple attempts to access forbidden file or directory from same source ip. Portion of the log(s): About the upgrade, I'm doing it right now. On Monday, December 3, 2012 6:06:15 PM UTC-2, dan (ddpbsd) wrote: On Mon, Dec 3, 2012 at 2:13 PM, Daniel Requena req