On Sun, Dec 17, 2017 at 3:26 AM, <[email protected]> wrote: > If I edit /var/ossec/etc/ossec.conf I can add my IP in > <global><white_list>MyIP</white_list></global> > > But as my IP is dynamic (it changes every day). I use a DNS to store my IP > address (similar to DynDNS). > > How can I whit list the DNS for OSSEC ? Or is there a workaround ? >
You can write a script to check the IP, if it changes, modify the conf file and restart the OSSEC processes. I imagine a simple implementation allowing whitelisting hostnames would be very noisy, and a less simple one would take more time to develop. > Thanks > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
