Version 0.9 of OSSEC HIDS is now available! The OSSEC project team is pleased to announce the release of OSSEC version 0.9. This new release comes with numerous new features, including active response for PF, policy-based rules (based on time and dates), scripted installs and new rules for horde imp, solaris ftpd, vsftpd, samba, telnet, pam and nmap output files. In addition to that, the Windows agent was heavily improved, with multiple bug fixes and the inclusion of integrity checking (syscheck ported to windows). We also have our translations completed to French, Russian and Japanese (besides Portuguese, Polish, German, Turkish and Italian). To download the Unix and Windows versions: http://www.ossec.net/en/downloads.html Use our mailling list if you have any questions or comments: http://www.ossec.net/en/mailing_lists.html More information about the Windows support: http://www.ossec.net/en/manual.html#windows See also: "Why use the Windows Agent?" in the FAQ. http://www.ossec.net/en/faq.html#a1.6 Detailed changelog (notable new features): - Active response for PF (Thanks Rafael Capovilla for the help). http://www.ossec.net/en/manual.html#active-response-tools - Scripted installs (allowing fast installs on many systems). - New rules for horde imp, solaris ftpd, vsftpd, samba, telnet and pam. - Support for updates. - Support for policy-based rules, based on time and day of the week. - Support for nmap logs, alerting on host changes/additions. http://www.ossec.net/en/faq.html#a1.8 - Support for integrity checking (syscheck) on Windows platforms. - Support for compression of the agent/server communication channel. - Installation in Japanese (Thanks Kuzuno Hiroki). - Installation in French (Thanks Yves Bigliazzi). - Installation in Russian (Thanks Yuri Slobodyanyuk). - Addition of a reporting/stats tool under contrib. (Thanks Meir Michanie). - Addition of a tool to export ossec alerts to a mysql database. (Thanks Jorge Augusto Senger). - Lots of improvements and bug fixes for the windows agent and other parts of the system. (Thanks Liliane Cid for the help) - Web site updated with new tutorials, howtos, etc. http://www.ossec.net For more information: http://www.ossec.net/ To download the new version: http://www.ossec.net/en/downloads.html We want to thank everyone who sent comments, suggestions or just some nice words to us! We really appreciate the feedback! Daniel B. Cid (in name of the OSSEC HIDS team). http://www.ossec.net/en/about.html#dev-team http://www.ossec.net/announcements/v09-2006-07-25.txt