Re: [ossec-list] ossec server behind nat?

2011-02-23 Thread dan (ddp)
Hi Joel, On Tue, Feb 22, 2011 at 9:19 PM, Joel Brooks wrote: > Hi gang, > > I'm wondering if there's any tricks to getting ossec working when the > server is behind a NAT. > > here's the case: > > i have some linode servers that i'd like to monitor with ossec. > the ossec server is in the office

Re: [ossec-list] ossec server behind nat?

2011-02-23 Thread Holger Gläß
hi this scenario working well ,you have to redirect the port. on openbsd 4.8 you can do this like. match in on wan_if proto tcp from any to (wan_if) port 1514 rdr-to ossec-server port 1514 the (wan_if) is an option for the fw code to read the ip direct frrom interface. on linux for exampl

[ossec-list] ossec server behind nat?

2011-02-22 Thread Joel Brooks
Hi gang, I'm wondering if there's any tricks to getting ossec working when the server is behind a NAT. here's the case: i have some linode servers that i'd like to monitor with ossec. the ossec server is in the office behind a NATting firewall. the ossecn agent on the linode boxes is configured