[Ossec-list] ossec-hids-0.7p1 questions

[kayvan at sylvan.com (Kayvan A. Sylvan)]

On Wed, Apr 05, 2006 at 09:24:04PM -0700, Kayvan A. Sylvan wrote:
> 
> 1) I am getting lots of emails like this from OSSEC:
> 
>    Received From: /var/log/messages
>    Rule: 102 fired (level 7) -> "Possible problem (unknown) somewhere
>    in the system"
>    Portion of the log(s):
> 
>    "named[3271]: client 69.51.117.46#12601: update 'sylvan.com/IN' denied
>    "
> 
>    How am I supposed to fix (or ignore) this?

I set up the ossec.conf to up the priority of email_notification to 8,
and I am still seeing all these level 7 notifications.

What's going on?

I even did "ossec-control restart" after I made the change.

Help!

			---Kayvan
-- 
Kayvan A. Sylvan          | Proud husband of       | Father to my kids:
Sylvan Associates, Inc.   | Laura Isabella Sylvan, | Katherine Yelena (8/8/89)
http://sylvan.com/~kayvan | my beautiful Queen.    | Robin Gregory (2/28/92)