From 495280d9dc4ff5efd555f50e65a120df1b780003 Mon Sep 17 00:00:00 2001 From: Dominik Lisiak Date: Sat, 13 Oct 2018 20:51:51 +0200 Subject: Initial commit for version 3.0.0 --- security/ossec-hids-local/files/message-firewall.in | 12 ++++++++++++ 1 file changed, 12 insertions(+) create mode 100644 security/ossec-hids-local/files/message-firewall.in (limited to 'security/ossec-hids-local/files/message-firewall.in') diff --git a/security/ossec-hids-local/files/message-firewall.in b/security/ossec-hids-local/files/message-firewall.in new file mode 100644 index 0000000..9e066e6 --- /dev/null +++ b/security/ossec-hids-local/files/message-firewall.in @@ -0,0 +1,12 @@ +If you intend to use "firewall-drop" active response on this OSSEC instance +create the script: +%%OSSEC_HOME%%/active-response/bin/firewall-drop.sh + +You can copy or hard link (symbolic link is not supported) one of the scripts +already provided by OSSEC: +%%OSSEC_HOME%%/active-response/bin/ipfilter.sh +%%OSSEC_HOME%%/active-response/bin/ipfw.sh +%%OSSEC_HOME%%/active-response/bin/pf.sh + +For further steps see the documentation: +https://www.ossec.net/docs/syntax/head_ossec_config.active-response.html -- cgit v1.2.3