I just installed Ossec in 2 windows box as [local] But when I try to do the wrong ssh login for testing purpose if ossec will block me. It do not block the ip for 600 seconds. But I am getting the email alert that someone tried x number of wrong ssh logins. In other servers its running perfectly fine. I installed gcc gcc++ cc compilers. Can anyone tell me what am I doing wrong?
Regards, DM
