The ossec agents are NOT communicating with the server... 1) IT IS NOT a firewall issue, FIRST I added the 1514/udp rule to the server firewall, THEN I even tried to take down iptables completely in both agents AND the server.
2) I reinstalled the keys (as explained here http://www.ossec.net/wiki/index.php/Errors:AgentCommunication) on one agent and it didn't work either. Synthoms: One agent complains that: "Process locked..." "Trying to connect to server..." "Error: Unable to connect to server" The other (the one with renewed keys) complains that: "Process locked..." (and stays like taht for ever) The server DOES NOT produce any output WHEN thet clients complain. But I have checked some previous complains in wich ossec-remoted sais: "Error: No IP or network allowed in the access file list for syslog..." Has this any solution or should I just give up and "throw ossec to the bin"? (I am a developer most of my time more than a sysadmin, so I don't have much time to spare on things like this) Thanks in adavance for any responses!
