I can try that, but why do you think that's the problem? the server is not 
logging any connection attempt at all.

On Friday, August 26, 2016 at 3:41:02 PM UTC-7, Eero Volotinen wrote:
>
> Try creating client key with correct ip addresa..
>
> 27.8.2016 12.35 ap. "Ka-Hing Cheung" <[email protected] <javascript:>> 
> kirjoitti:
>
>> I have ossec server and agent running in two different docker images. The 
>> agent is not able to connect to the server:
>>
>>
>> 2016/08/26 20:56:25 ossec-agentd: INFO: Trying to connect to server (
>> ossec.domain/10.0.129.94:1514).
>> 2016/08/26 20:56:25 ossec-agentd: INFO: Using IPv4 for: 10.0.129.94 .
>> 2016/08/26 20:56:46 ossec-agentd(4101): WARN: Waiting for server reply (
>> not started). Tried: 'ossec.domain/10.0.129.94'. 
>>
>>
>> There's no log on the server for the connection attempt. However, if I 
>> execute nc -u 10.0.129.94 1514 and send a random message, I see this in 
>> the server log:
>>
>>
>> 2016/08/26 19:19:46 ossec-remoted(1213): WARN: Message from 172.17.42.1 not 
>> allowed.
>>
>>
>> 172.17.42.1 is the IP from the docker interface. I already have this in 
>> my server ossec.conf:
>>
>>
>>
>>  <global>
>>  <white_list>127.0.0.1</white_list>
>>  <white_list>10.0.0.0/16</white_list>
>>  <white_list>172.17.0.0/16</white_list>
>>  </global>
>>
>>  <remote>
>>  <connection>secure</connection>
>>  <allowed-ips>10.0.0.0/16</allowed-ips>
>>  <allowed-ips>172.17.0.0/16</allowed-ips>
>>  </remote>
>>  
>>
>> Any ideas?
>>
>> - Ka-Hing
>>
>> -- 
>>
>> --- 
>> You received this message because you are subscribed to the Google Groups 
>> "ossec-list" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to [email protected] <javascript:>.
>> For more options, visit https://groups.google.com/d/optout.
>>
>

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to