It did not work. I'm still receiving ossec-remoted(1213): WARN: Message from xxx.xxx.xxx.xxx not allowed.
Where xxx.xxx.xxx.xx is my dom0 ip. Thanks for your reply, I'm still trying. 2009/12/22 Peter M. Abraham <[email protected]> > Greetings: > > While I'm still having problems on our own XenServer installation > (just working on today), I did solve one of the problems by reviewing > http://www.ossec.net/main/manual/configuration-options/ > > In our case the ossec server is on a XenGuest (not dom0), and I ended > up using the <local_ip>abc.def.hij.klm</local_ip> to /var/ossec/etc/ > ossec.conf on the server end. > > Even though UDP 1514 was listened on for all IP's, I had to specify > the public network IP for it to sort of work (I'm having other > problems now). > > Thank you. > -- Sergio Roberto Charpinel Jr.
