summaryrefslogtreecommitdiffstats
path: root/security/ossec-hids-local-config/files
diff options
context:
space:
mode:
Diffstat (limited to 'security/ossec-hids-local-config/files')
-rw-r--r--security/ossec-hids-local-config/files/template-rules-default.xml.in7
-rw-r--r--security/ossec-hids-local-config/files/template-sample-server.xml.in4
2 files changed, 8 insertions, 3 deletions
diff --git a/security/ossec-hids-local-config/files/template-rules-default.xml.in b/security/ossec-hids-local-config/files/template-rules-default.xml.in
index e7c18be..5f34a6a 100644
--- a/security/ossec-hids-local-config/files/template-rules-default.xml.in
+++ b/security/ossec-hids-local-config/files/template-rules-default.xml.in
@@ -47,6 +47,8 @@
<include>msauth_rules.xml</include>
<include>mcafee_av_rules.xml</include>
<include>ms-se_rules.xml</include>
+ <include>sysmon_rules.xml</include>
+ <include>ms_ipsec_rules.xml</include>
<include>vmware_rules.xml</include>
<include>ids_rules.xml</include>
<include>apache_rules.xml</include>
@@ -70,8 +72,11 @@
<include>owncloud_rules.xml</include>
<include>proxmox-ve_rules.xml</include>
<include>opensmtpd_rules.xml</include>
+ <include>dnsmasq_rules.xml</include>
+ <include>linux_usbdetect_rules.xml</include>
+ <include>ms1016_usbdetect_rules.xml</include>
+ <include>ms_firewall_rules.xml</include>
<include>psad_rules.xml</include>
- <include>sysmon_rules.xml</include>
<include>unbound_rules.xml</include>
<include>local_rules.xml</include>
diff --git a/security/ossec-hids-local-config/files/template-sample-server.xml.in b/security/ossec-hids-local-config/files/template-sample-server.xml.in
index d4efd19..901e26a 100644
--- a/security/ossec-hids-local-config/files/template-sample-server.xml.in
+++ b/security/ossec-hids-local-config/files/template-sample-server.xml.in
@@ -3,8 +3,8 @@
<remote>
<connection>secure</connection>
- <!-- Because of a bug, setting the address is mandatory for IPv4. -->
- <local_ip>1.2.3.4</local_ip>
+ <!-- OSSEC server listens on all interfacees by default. -->
+ <!-- <local_ip>1.2.3.4</local_ip> -->
</remote>
<global>