It appears that a system with IP address of 192.168.80.1 is trying to communicate with the OSSEC server, but no agent is configured to use that IP address. Check manage_agents to see if there is a system configured to use th at IP. If so, you may need to re-export/import the key.
On Thu, Sep 30, 2010 at 10:49 AM, Aamir Niazi <[email protected]> wrote: > Hello List, > > I recently starting seeing this error in the ossec.log and it continues to > repeat itself every one minute or so. > > ossec-remoted (1213) : WARN: Message from 192.168.80.1 not allowed. I can't > seem to figure out where is this coming from. Any help would be appreciated. > > Thanks > > -- > Best Regards, > > Aamir Niazi > Senior Security Analyst >
