On Wed, Jan 30, 2013 at 6:00 AM, <[email protected]> wrote: > why?w i don't konw this options "<connection>syslog</connection>" what mean? >
That option forces ossec-remoted to listen for syslog messages. The secure option only allows agents to pass log messages on, so allowed-ips doesn't matter. > 在 2013年1月28日星期一UTC+8下午9时29分50秒，dan (ddpbsd)写道： >> >> On Mon, Jan 28, 2013 at 4:35 AM, root <[email protected]> wrote: >> > hi,guys >> > >> > in my ossec server's ossec.conf,i configure like this >> > >> > >> > <remote> >> > <connection>secure</connection> >> > <allowed-ips>192.168.0.0/16</allowed-ips> >> > <local_ip>192.168.224.94</local_ip> >> > </remote> >> > >> > <remote> >> > <connection>syslog</connection> >> > <allowed-ips>192.168.0.0/16</allowed-ips> >> > <local_ip>192.168.224.94</local_ip> >> > </remote> >> > >> > >> > >> > i think ask this configure is right? >> > >> >> Not really. You shouldn't need the allowed-ips in the secure >> connection configuration. And if you don't need both the secure and >> syslog, don't configure them both. >> >> > >> > thanks&Best >> > Regards >> > >> > >> > >> > thks&Best Regards >> > >> > -- >> > >> > --- >> > You received this message because you are subscribed to the Google >> > Groups >> > "ossec-list" group. >> > To unsubscribe from this group, send email to >> > [email protected]. >> > For more options, visit https://groups.google.com/groups/opt_out. >> > >> > > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > > For more options, visit https://groups.google.com/groups/opt_out. > > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
