[email protected] wrote:
> Can anyone shed a little light on this error. Thank You
>
> ossec-remoted(1501): ERROR: No IP or network allowed in the access list
> for syslog. No reason for running it. Exiting
Hello Christian,
ossec-remoted will only run syslog if you have defined allowed-ips. For
example:
<remote>
<connection>syslog</connection>
<allowed-ips>172.16.0.1</allowed-ips>
<allowed-ips>10.0.0.0/16</allowed-ips>
</remote>
--
Michael Starks
[I] Immutable Security
http://www.immutablesecurity.com
