I added GeoIP support on OSSEC 2.8 based on the instruction from
http://www.ossec.net/files/ossec-hids-2.7-release-note.txt
and I get the following error message:
Starting OSSEC: ossec-maild(2302): ERROR: Invalid definition for
maild.geoip: '1 '.
This is caused by the following setting on /etc/internal_options.conf
# Maild display GeoIP data (0=disabled, 1=enabled)
maild.geoip=1
I can start ossec only if I change
maild.geoip to 0 (maild.geoip=0)
How do I fix that?
TIA,
Dan
--
---
You received this message because you are subscribed to the Google Groups
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.