Well, it's closer, but still not working. I did fresh installs on both the server and agent and now I'm getting the below message on the server:
ossec-remoted(2202): Error uncompressing string. Obviously now, there's traffic going from the agent to the server (also confirmed by tcpdump). I tried changing line 40 in compress.c back to the original: if ((uLong)stream.avail_out != *destLen) return Z_BUF_ERROR; but that didn't do the trick. I'll have to wait and see if the whitelist and netmask issues go away. Thanks, Hugh
