On Fri, Jun 21, 2013 at 2:51 PM, Erik Karnafel <[email protected]> wrote: > Hi All, > > Have any of you had success deploying ossec over nat. > I want agents reporting to my OSSEC server from internet. Different > Clients. > > What ports do I need to nat in order for this to work. > > I tried nating 12201 (GELF) port, but that does not work. I thought maybe > ssh needed also. That didn't help. > Agents over nat cannot seem to communicate. >
OSSEC continues to use udp/1514 for secure communications. If multiple agents will appear to be coming from the same IP address, remember to add them with IP "any" so the duplicate IPs won't be an issue. > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/groups/opt_out. > > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
