On 02/05/2012 11:56 AM, lucas kauffman wrote:
>
> Also if an IP is blocked, how can I unblock it through ossec ? Or do I
> have to do it manually and delete the entries for hosts.deny and iptables ?
OSSEC will unblock automatically, based on the timeout parameter in
ossec.conf or you your local
Hello,
I'm quite new to OSSEC, and there are two things I can't find out:
How do I increase the frequency of the rule when someone is blocked because
of a 400 error (failed to login through htaccess in Apache2). I looked for
the rule, but it doesn't show a frequency, is there a default frequency
On 04.02.2012 10:01, Oliver Müller wrote:
> I definitely get a segfault though and I clear out my local rules. There was
> nothing in there execpt of this group with one rule.
> Is it an Ubuntu problem then?
i would say, yes.
maybe a backtrace of the core dump (compiled with debug info) gives a
