Re: [ossec-list] how to remove the iptables deny rules from ossec

[bw]

On 07/26/2012 10:13, shinu ak wrote:

I would like to remove the deny rules which is called by ossesc, I have
started ossec just for monitoring, want to remove such deny rules from
ossec config file.

You want to disable active response.

Add this to /var/ossec/ossec.conf:

<active-response>
        <disabled>yes</disabled>
</active-response>