Re: [ossec-list] Active Response location question

2017-06-07 Thread sandaway
Thanks, it worked! On Wednesday, June 7, 2017 at 3:39:34 PM UTC-4, dan (ddpbsd) wrote: > > > > On Jun 7, 2017 2:09 PM, "sandaway" > > wrote: > > I really need some help. It looks my OSSEC setup, a server and two > clients, could not run active response properly. From > the active-responses.log

Re: [ossec-list] Active Response location question

2017-06-07 Thread dan (ddp)
On Jun 7, 2017 2:09 PM, "sandaway" wrote: I really need some help. It looks my OSSEC setup, a server and two clients, could not run active response properly. From the active-responses.log, the firewall-drop.sh command runs either on server or clients, depending on the I set as in the following e

[ossec-list] Active Response location question

2017-06-07 Thread sandaway
I really need some help. It looks my OSSEC setup, a server and two clients, could not run active response properly. From the active-responses.log, the firewall-drop.sh command runs either on server or clients, depending on the I set as in the following example. firewall-drop