I would say this is a unix routing issue where the systems own routing table is telling the machine to use the other interface as it is "closer".
Michael, It would be very useful if you could supply the list with some sort of network addressing schema for your system along with a copy of the routing table. Would suggest the following as a minimum. - ifconfig - netstat -nr - traceroute to ossec server Thanks Richard On 6 March 2012 06:39, Michael Barrett <[email protected]> wrote: > > I'm not sure. The unix team doesn't seem to think so.... > > Can I assign two keys? I tried putting 2 in the client.keys but that > didn't seem to work. Maybe I did it wrong? > *____________________________________________* > *Michael Barrett* <[email protected]>* *| *Information Security > Analyst - Lead* | *Mortgage Guaranty Insurance > Corporation*<http://www.mgic.com/> > 270 E. Kilbourn Ave. | Milwaukee, WI 53202 USA | ( 1.414.347.6271 | 7 > 1.888.601.4440 | * [email protected] > > This message is intended for use only by the person(s) addressed above and > may contain privileged and confidential information. Disclosure or use of > this message by any other person is strictly prohibited. If this message is > received in error, please notify the sender immediately and delete this > message. > > > > From: "dan (ddp)" <[email protected]> To: [email protected] > Date: 03/06/2012 05:55 AM Subject: Re: [ossec-list] two interfaces Sent > by: [email protected] > ------------------------------ > > > > I may be way off base here, but shouldn't the system's routing take > care of this? > > On Mon, Mar 5, 2012 at 1:29 PM, Michael Barrett > <[email protected]> wrote: > > > > I have a RH 5 box with two interfaces on different subnets > > > > The interface that the key is on works fine but the other interface is > > trying to connect to the ossec server and I get a reject error > > > > Is there any way to configure the agent to use only one interface? > > ____________________________________________ > > Michael Barrett | Information Security Analyst - Lead | Mortgage Guaranty > > Insurance Corporation > > 270 E. Kilbourn Ave. | Milwaukee, WI 53202 USA | ( 1.414.347.6271 | 7 > > 1.888.601.4440 | * [email protected] > > > > This message is intended for use only by the person(s) addressed above > and > > may contain privileged and confidential information. Disclosure or use of > > this message by any other person is strictly prohibited. If this message > is > > received in error, please notify the sender immediately and delete this > > message. > > >
