[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ossec-list
Subject:    [ossec-list] Active Response - Repeat offenders
From:       Tim Peary <directlanco () gmail ! com>
Date:       2015-10-22 12:01:47
Message-ID: b57a94a8-8457-4fd3-8a92-6c10d1a6ad89 () googlegroups ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


Hi,
We have a OSSEC server connected to 4 OSSEC agents.
Active responses appear to be erratic even though the server is set to 
block IP addresses on all agents.

Does anyone know were the Repeat Offenders are stored ? I am assuming there 
must be a list of IP addresses with times as to when they must be unblocked.

Is this storage on the Server or Agents?

I wish to reset the agents and servers so that any new blocks start affresh 
so to speak.

Many Thanks

-- 

--- 
You received this message because you are subscribed to the Google Groups \
"ossec-list" group. To unsubscribe from this group and stop receiving emails from it, \
send an email to ossec-list+unsubscribe@googlegroups.com. For more options, visit \
https://groups.google.com/d/optout.


[Attachment #5 (text/html)]

<div dir="ltr">Hi,<br>We have a OSSEC server connected to 4 OSSEC agents.<br>Active \
responses appear to be erratic even though the server is set to block IP addresses on \
all agents.<br><br>Does anyone know were the Repeat Offenders are stored ? I am \
assuming there must be a list of IP addresses with times as to when they must be \
unblocked.<br><br>Is this storage on the Server or Agents?<br><br>I wish to reset the \
agents and servers so that any new blocks start affresh so to speak.<br><br>Many \
Thanks<br></div>

<p></p>

-- <br />
<br />
--- <br />
You received this message because you are subscribed to the Google Groups \
&quot;ossec-list&quot; group.<br /> To unsubscribe from this group and stop receiving \
emails from it, send an email to <a \
href="mailto:ossec-list+unsubscribe@googlegroups.com">ossec-list+unsubscribe@googlegroups.com</a>.<br \
/> For more options, visit <a \
href="https://groups.google.com/d/optout">https://groups.google.com/d/optout</a>.<br \
/>

------=_Part_679_1312674322.1445515307001--



[prev in list] [next in list] [prev in thread] [next in thread]