Okay, I feel pretty stupid. It was totally a firewall issue...sorry, I'm still learning linux. However, I'm still having a bit of an issue. I can get an Apache test page now. Also, when I go to http://IP/ossec-wui I just get an index of /ossec-wui containing ossec-wui-0.3.tar.gz and ossec-wui-0.3/.
I'm guessing I have some things in the wrong places. I went into my httpd.conf file and found that the document root is /var/www/html which may be causing my problems. Im not exactly sure what should be where, though. I appreciate your help and patience! Thanks, -- Lauren Malhoit IASTA Network Engineer +1.317.663.6263 (direct) +1.317.594.8600 (main) Blog: www.esourcingforum.com Wiki: www.esourcingwiki.com -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of dan (ddp) Sent: Friday, December 03, 2010 10:28 AM To: [email protected] Subject: Re: [ossec-list] Not able to get WUI working On Fri, Dec 3, 2010 at 10:18 AM, Lauren Malhoit <[email protected]> wrote: > > Im not even able to get an Apache test page. I doubt anything would appear in the webserver logs on the OSSEC machine because I dont think Im able to connect to it via a browser at all. I basically get a connection timed out error. > > > > Any suggestions? > > > > Thanks, > > Make sure httpd is running, make sure there isn't a firewall blocking the traffic, make sure the traffic is making it to the system. > > -- > > Lauren Malhoit > > IASTA Network Engineer > > +1.317.663.6263 (direct) > > +1.317.594.8600 (main) > > Blog: www.esourcingforum.com > > Wiki: www.esourcingwiki.com > > > > > > From: [email protected] [mailto:[email protected]] > On Behalf Of Up2Long > Sent: Thursday, December 02, 2010 9:53 PM > To: [email protected] > Subject: RE: [ossec-list] Not able to get WUI working > > > > Lauren, > > > > Were you able to view the Apache test page? > > > > If you can access your Apache test page and still cant view the OSSEC interface: You may wish to look at your httpd.conf and your vhost.conf files. Make sure that there are not any entries that block IP access and or directory access from your server. Red Hat use to set the default httpd.conf to block all incoming http requests. I am not sure if they are still doing that. > > > > > > > > Up2Long > > > > ________________________________ > > From: [email protected] [mailto:[email protected]] > On Behalf Of Lauren Malhoit > Sent: Thursday, December 02, 2010 5:00 PM > To: [email protected] > Subject: [ossec-list] Not able to get WUI working > > > > Hi all, > > Im new to OSSEC so forgive my ignorance. I have the OSSEC server/client portion working and it sends me emails. However, the WUI seems to be baffling me. I followed the directions here: http://www.ossec.net/main/manual/wui-ubuntu/ pretty much exactly. The only thing I changed was that Im using Red Hat and apt-get install apache2 libapache2-mod-php5 # said yes to all required packages wasnt available. I yum installed httpd and php. I made sure to restart httpd when the directions indicated to restart apache. > > > > Everything else seemed to go fine. No error messages at all. When I try to go to the site, though no luck. Ive tried going to http://IP/ossec and http://IP/ossec-wui and no luck. I get an Internet Explorer cannot display the webpage. > > > > Any troubleshooting tips? > > > > Thanks, > > > > -- > > Lauren Malhoit > > IASTA Network Engineer > > +1.317.663.6263 (direct) > > +1.317.594.8600 (main) > > Blog: www.esourcingforum.com > > Wiki: www.esourcingwiki.com > > > >
