[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[ossec-list] Re: How can I see why a IP has been bloqued?

To: ossec-list@xxxxxxxxxxxxxxxx
Subject: [ossec-list] Re: How can I see why a IP has been bloqued?
From: Ken A <ka@xxxxxxxxxxx>
Date: Fri, 19 Oct 2007 08:34:05 -0500
Authentication-results: mx.google.com; spf=pass (google.com: domain of ka@xxxxxxxxxxx designates 208.106.118.17 as permitted sender) smtp.mail=ka@xxxxxxxxxxx

Paco Avila wrote:
> I can see an active response log
> in /var/ossec/logs/active-responses.log, but I can't see why an IP has
> been bloqued.
> 

look in the alerts log for the same ip.

-- 
Ken Anderson
Pacific.Net

References:
- [ossec-list] Problem with the e-mail alert times
  - From: Daniel Cid
- [ossec-list] How can I see why a IP has been bloqued?
  - From: Paco Avila

Prev by Date: [ossec-list] Re: How can I see why a IP has been bloqued?
Next by Date: [ossec-list] Re: ossec-.13 agent stopping by itself on CentOS 5 64-bit
Previous by thread: [ossec-list] Re: How can I see why a IP has been bloqued?
Next by thread: [ossec-list] troubleshooting syscheck suggestions?
Index(es):
- Date
- Thread

OSSEC home | Main Index | Thread Index

OSSEC project: www.ossec.net.
Mailling list information: http://www.ossec.net/en/mailing_lists.html.