[ossec-list] How to white list dynamic IP with a DNS provider (DynDNS, etc.) ?

If I edit /var/ossec/etc/ossec.conf I can add my IP in MyIP But as my IP is dynamic (it changes every day). I use a DNS to store my IP address (similar to DynDNS). How can I whit list the DNS for OSSEC ? Or is there a workaround ? Thanks -- --- You received this message because you are

Re: [ossec-list] How to white list dynamic IP with a DNS provider (DynDNS, etc.) ?

Thanks Dan, I think this is the only right way, yes. Le jeudi 21 décembre 2017 14:00:19 UTC+1, dan (ddpbsd) a écrit : > > On Sun, Dec 17, 2017 at 3:26 AM, > wrote: > > If I edit /var/ossec/etc/ossec.conf I can add my IP in > > MyIP > > > > But as my IP is dynamic (it

[ossec-list] Rule: 31533 (level 10) -> 'High amount of POST requests in a small period of time (likely bot).'

Hi, I need to add to my local rules exceptions for theses 2 recurring problems : Rule: 31533 (level 10) -> 'High amount of POST requests in a small period of time (likely bot).' ""POST /socket.io/?EIO=3=p Rule: 31533 fired (level 10) -> "High amount of POST requests in a small period of

[ossec-list] Re: Rule: 31533 (level 10) -> 'High amount of POST requests in a small period of time (likely bot).'

Thanks a lot for your help ! I have written ^/socket.io instead of ^/socket.io/ (I have removed the `/`) and it works !! Le vendredi 23 mars 2018 13:46:26 UTC+1, francisco...@wazuh.com a écrit : > > Hi Marc. > > Your rule seems to be correct, I can't figure out why is not working. > Maybe the