I can try that, but why do you think that's the problem? the server is not logging any connection attempt at all.
On Friday, August 26, 2016 at 3:41:02 PM UTC-7, Eero Volotinen wrote: > > Try creating client key with correct ip addresa.. > > 27.8.2016 12.35 ap. "Ka-Hing Cheung" <[email protected] <javascript:>> > kirjoitti: > >> I have ossec server and agent running in two different docker images. The >> agent is not able to connect to the server: >> >> >> 2016/08/26 20:56:25 ossec-agentd: INFO: Trying to connect to server ( >> ossec.domain/10.0.129.94:1514). >> 2016/08/26 20:56:25 ossec-agentd: INFO: Using IPv4 for: 10.0.129.94 . >> 2016/08/26 20:56:46 ossec-agentd(4101): WARN: Waiting for server reply ( >> not started). Tried: 'ossec.domain/10.0.129.94'. >> >> >> There's no log on the server for the connection attempt. However, if I >> execute nc -u 10.0.129.94 1514 and send a random message, I see this in >> the server log: >> >> >> 2016/08/26 19:19:46 ossec-remoted(1213): WARN: Message from 172.17.42.1 not >> allowed. >> >> >> 172.17.42.1 is the IP from the docker interface. I already have this in >> my server ossec.conf: >> >> >> >> <global> >> <white_list>127.0.0.1</white_list> >> <white_list>10.0.0.0/16</white_list> >> <white_list>172.17.0.0/16</white_list> >> </global> >> >> <remote> >> <connection>secure</connection> >> <allowed-ips>10.0.0.0/16</allowed-ips> >> <allowed-ips>172.17.0.0/16</allowed-ips> >> </remote> >> >> >> Any ideas? >> >> - Ka-Hing >> >> -- >> >> --- >> You received this message because you are subscribed to the Google Groups >> "ossec-list" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected] <javascript:>. >> For more options, visit https://groups.google.com/d/optout. >> > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
