[Ossec-list] agent-server connection not allowed

[campoe at usf.edu (Alex Campoe)]

Probably simple and right under my nose, but ...

Server is running on a Fedora Core 5 box, agent on Solaris 9 box. I used 
the manage_agents per instructions, punched hole on iptable for 1514 and 
514. One the server log I am getting this:

2006/05/26 09:55:02 ossec-remoted(1213): Message from 131.247.100.6 not 
allowed. <repeat several times per minute>


but the configuration is correct (I think):

ossec.conf snippet

    <remote>
      <connection>syslog</connection>
      <allowed-ips>131.247.100.6</allowed-ips>
    </remote>

    <remote>
      <connection>secure</connection>
      <allowed-ips>131.247.100.6</allowed-ips>
    </remote>

Any ideas?

Alex
C
-- 
--  Alex Campoe, CISSP            Information Security Manager       --
--                                Associate Director, Systems        --
--  Email: campoe at usf.edu         Phone: (813) 974-1796              --
--  Academic Computing            University of South Florida        --
-----------------------------------------------------------------------
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3158 bytes
Desc: S/MIME Cryptographic Signature
Url : http://mailman.underlinux.com.br/pipermail/ossec-list/attachments/20060526/4305bafe/attachment.bin