Thanks for you help. Every connection comes to domU with dom0 IP. I will check my Xen network configuration.
2009/12/29 Sergio Charpinel Jr. <[email protected]> > It did not work. > I'm still receiving > ossec-remoted(1213): WARN: Message from xxx.xxx.xxx.xxx not allowed. > > Where xxx.xxx.xxx.xx is my dom0 ip. > > Thanks for your reply, I'm still trying. > > > 2009/12/22 Peter M. Abraham <[email protected]> > > Greetings: >> >> While I'm still having problems on our own XenServer installation >> (just working on today), I did solve one of the problems by reviewing >> http://www.ossec.net/main/manual/configuration-options/ >> >> In our case the ossec server is on a XenGuest (not dom0), and I ended >> up using the <local_ip>abc.def.hij.klm</local_ip> to /var/ossec/etc/ >> ossec.conf on the server end. >> >> Even though UDP 1514 was listened on for all IP's, I had to specify >> the public network IP for it to sort of work (I'm having other >> problems now). >> >> Thank you. >> > > > > -- > Sergio Roberto Charpinel Jr. > -- Sergio Roberto Charpinel Jr.
