<!-- Here we set a host-deny command. The shell script must be
  -  inside /var/ossec/active-response/bin with the name of 
  -  host-deny.sh. It will receive an IP as argument.
  -->
<command>
  <name>host-deny</name>
  <executable>host-deny.sh</executable>
  <expect>srcip</expect>
  <timeout_allowed>yes</timeout_allowed>
</command>
