Hi, We have a OSSEC server connected to 4 OSSEC agents. Active responses appear to be erratic even though the server is set to block IP addresses on all agents.
Does anyone know were the Repeat Offenders are stored ? I am assuming there must be a list of IP addresses with times as to when they must be unblocked. Is this storage on the Server or Agents? I wish to reset the agents and servers so that any new blocks start affresh so to speak. Many Thanks -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
