Hello,
I have 4 computers with ossec installed. (ns1,ns2,ns3, & ns4)
Updated to version 1.4
Ns1 is also the ossec server.
Everything is working fine except that events with level 6 and
above don´t execute the active responses (iptables) ONLY in the server.
In the rest of the client's, everything I working fine,
including the active responses.
After the original installation everything worked ok, but
somehow the server stopped the active responses about one month ago.
I updated to 1.4 in the hope that the problem would disappear, but it did not.
Any help will be appreciated.
Un saludo,
Larry A. Rider
