Hi Dan, thanks for quick reply. On Thu, 2011-12-29 at 16:05 -0500, dan (ddp) wrote: > Does the repeated offenders option get recognized? (you should see > messages about it in ossec.log) No, nothing about repeated offenders in ossec.log
> What version of OSSEC? 2.6, like I stated in the subject line. Official download version. > What platform? Ubuntu 10.04.2 LTS official ubuntu kernel 2.6.32-37-server In what time window should the repeated offenders option be triggered? repeated attacks in 1 hour? 10 Min. after timeout? How is it supposed to work? tia Rainer > On Thu, Dec 29, 2011 at 3:58 PM, Rainer <[email protected]> wrote: > > Hi! > > > > In my local installation the repated offenders feature is not > > working. I had an offender on distinct sites on my server (apache > > virtual hosts on one machine) all day, but active response > > always worked only with the normal blocking time. > > [logs quoting removed ]
