On Fri, Oct 21, 2016 at 6:38 AM, Herman Harperink
<[email protected]> wrote:
> I've been testing this, doesnt work.
>

Here's what's working for me:
  <active-response>
    <command>firewall-drop</command>
    <location>all</location>
    <rules_id>5712,5718</rules_id>
  </active-response>

  <active-response>
    <command>firewall-drop</command>
    <location>server</location>
    <rules_id>5712,5718</rules_id>
  </active-response>


> On Wednesday, October 19, 2016 at 6:25:33 PM UTC+2, Herman Harperink wrote:
>>
>> Due to some other obligations I am unable to spen much time on this atm.
>> Thanks for your efforts. I might have some time tomorrow, if I am able to
>> complete my current task :-)
>
> --
>
> ---
> You received this message because you are subscribed to the Google Groups
> "ossec-list" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> For more options, visit https://groups.google.com/d/optout.

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to