Hi Rene, I know what you mean, but it is not possible right now. The agent will use the best route (and interface) as specified by the kernel. To avoid having problems with the authentication keys (since the source ip can change*), you can configure it as a network instead of a single IP address (on manage_agents).
Take a look at: http://www.ossec.net/wiki/index.php/Know_How:DynamicIPs *most of the times, it will always use the same interface, unless you have a weird configuration, with different interfaces pointing to the same network.. Hope it helps. -- Daniel B. Cid dcid ( at ) ossec.net On Tue, May 13, 2008 at 12:06 PM, Rene Pilz <[EMAIL PROTECTED]> wrote: > > Hi! > > I have a question! Is it possible to tell the ossec agent that it should > send the messages to the server using a special IP? > > Example: A server has 2 addresses and it is only possible for the agent > to send the messages to the server using one of these two addresses! > > Is this possible? > > Thanks in advance! > > Greetings René > >
