[ossec-list] Re: Agent control (linux server > windows agent) - active response path incorrect
Not the issue - cmd executes correctly from the ossec-agent install path. Issue is in parameter list passed from server to agent (2nd param is a hyphen not the ip address) -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[ossec-list] Disable all rules for ossec server
Hello, I try to disable all rules to ossec server. This is possible? Thanks!! -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[ossec-list] Opening port for ossec server/agents
Hello, I'm getting a bit lost with the port opening for ossec. Let's say I have 3 machines running on ubuntu 16.04. I do a fresh install of OSSEC manager on the machine A and a fresh install of ossec agent on both B & C. Now I want to register my machines B & C using ossec-authd; I have the certificat on my manager so I run 'ossec-authd' . on my agents I run 'agent-auth -m IP_Manager' But this won't work unless I open the port 1515 (by default) with iptables plus the udp 1514 , what should the correct steps be ? Or better is there a way to automate it ? Best regards. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [ossec-list] Opening port for ossec server/agents
On Apr 25, 2017 11:37 AM, "Martin"wrote: Hello, I'm getting a bit lost with the port opening for ossec. Let's say I have 3 machines running on ubuntu 16.04. I do a fresh install of OSSEC manager on the machine A and a fresh install of ossec agent on both B & C. Now I want to register my machines B & C using ossec-authd; I have the certificat on my manager so I run 'ossec-authd' . on my agents I run 'agent-auth -m IP_Manager' But this won't work unless I open the port 1515 (by default) with iptables plus the udp 1514 , what should the correct steps be ? Or better is there a way to automate it ? That seems right. What's confusing about it? Best regards. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [ossec-list] Disable all rules for ossec server
On Apr 25, 2017 11:25 AM, "Huc Manté Miras"wrote: Hello, I try to disable all rules to ossec server. This is possible? Have you tried removing the rules from the server's ossec.conf? Thanks!! -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.