that mean is i can configure like this?
<remote>
<connection>secure</connection>
</remote>
<remote>
<connection>syslog</connection>
<allowed-ips>192.168.0.0/16</allowed-ips>
<local_ip>192.168.224.94</local_ip>
</remote>
thanks&Best Regards
From: dan (ddp)
Date: 2013-01-30 21:45
To: ossec-list
Subject: Re: [ossec-list] this configure is right
On Wed, Jan 30, 2013 at 6:00 AM, <[email protected]> wrote:
> why?w i don't konw this options "<connection>syslog</connection>" what mean?
>
That option forces ossec-remoted to listen for syslog messages. The
secure option only allows agents to pass log messages on, so
allowed-ips doesn't matter.
> 在 2013年1月28日星期一UTC+8下午9时29分50秒，dan (ddpbsd)写道：
>>
>> On Mon, Jan 28, 2013 at 4:35 AM, root <[email protected]> wrote:
>> > hi,guys
>> >
>> > in my ossec server's ossec.conf,i configure like this
>> >
>> >
>> > <remote>
>> > <connection>secure</connection>
>> > <allowed-ips>192.168.0.0/16</allowed-ips>
>> > <local_ip>192.168.224.94</local_ip>
>> > </remote>
>> >
>> > <remote>
>> > <connection>syslog</connection>
>> > <allowed-ips>192.168.0.0/16</allowed-ips>
>> > <local_ip>192.168.224.94</local_ip>
>> > </remote>
>> >
>> >
>> >
>> > i think ask this configure is right?
>> >
>>
>> Not really. You shouldn't need the allowed-ips in the secure
>> connection configuration. And if you don't need both the secure and
>> syslog, don't configure them both.
>>
>> >
>> > thanks&Best
>> > Regards
>> >
>> >
>> >
>> > thks&Best Regards
>> >
>> > --
>> >
>> > ---
>> > You received this message because you are subscribed to the Google
>> > Groups
>> > "ossec-list" group.
>> > To unsubscribe from this group, send email to
>> > [email protected].
>> > For more options, visit https://groups.google.com/groups/opt_out.
>> >
>> >
>
> --
>
> ---
> You received this message because you are subscribed to the Google Groups
> "ossec-list" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
>
> For more options, visit https://groups.google.com/groups/opt_out.
>
>
--
---
You received this message because you are subscribed to the Google Groups
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.
--
---
You received this message because you are subscribed to the Google Groups
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.
