store | blogs | forums | twitter | facebook | wiki | mailing lists | downloads | support portal
Atomic Secure Linux
It is currently Wed May 22, 2013 5:38 pm

» Feed - Atomicorp

All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic Share/Bookmark  [ 5 posts ] 
Author Message
 Post subject: Disable OSSEC email alerts because of user-agent
Unread postPosted: Sat Jun 30, 2012 11:58 am 
Offline
Forum Regular
Forum Regular

Joined: Tue Jun 09, 2009 12:57 pm
Posts: 134
Is it possible to disable email alerts for when a client matches the bad User Agent list?

_________________
CentOS 6.3 (2.6.32.60-40.art.x86_64)
ASL 3.2.13-30.el6.art
Webmin 1.6.2
Virtualmin 3.99.gpl
Apache 2.2.15
PHP 5.3.3 (mod_fcgid/2.3.7)


Top
 Profile  
 
 Post subject: Re: Disable OSSEC email alerts because of user-agent
Unread postPosted: Sat Jun 30, 2012 1:34 pm 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
User avatar

Joined: Thu Feb 07, 2008 7:49 pm
Posts: 3245
Location: Chantilly, VA
Yes, you can disable email alerts for any rule. Just set Email for that rule to "no".

You can access the rule manager by following this process:

https://www.atomicorp.com/wiki/index.ph ... le_Manager

_________________
Michael Shinn
Atomicorp - Security For Everyone

Co-Author of Troubleshooting Linux Firewalls.


Top
 Profile  
 
 Post subject: Re: Disable OSSEC email alerts because of user-agent
Unread postPosted: Sat Jun 30, 2012 3:44 pm 
Offline
Forum Regular
Forum Regular

Joined: Tue Jun 09, 2009 12:57 pm
Posts: 134
mikeshinn wrote:
Yes, you can disable email alerts for any rule. Just set Email for that rule to "no".

You can access the rule manager by following this process:

https://www.atomicorp.com/wiki/index.ph ... le_Manager


Thanks, but clicking in the mail envelope toggles no action. similar interface problem I had with firewall rule management interface (update rule didnt work)

_________________
CentOS 6.3 (2.6.32.60-40.art.x86_64)
ASL 3.2.13-30.el6.art
Webmin 1.6.2
Virtualmin 3.99.gpl
Apache 2.2.15
PHP 5.3.3 (mod_fcgid/2.3.7)


Top
 Profile  
 
 Post subject: Re: Disable OSSEC email alerts because of user-agent
Unread postPosted: Sun Jul 01, 2012 4:10 pm 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
User avatar

Joined: Thu Feb 07, 2008 7:49 pm
Posts: 3245
Location: Chantilly, VA
Quote:
Thanks, but clicking in the mail envelope toggles no action. similar interface problem I had with firewall rule management interface (update rule didnt work)


If I understand you correctly, thats not how you edit a rule. Those icons are indicators, clicking on them does not do anything. To change the configuration of the rule you need to click on the down arrow to the left of the rule ID, then you'll see the rule options, as documented in the link above.

Then you can set whatever options you prefer. I've provided a link to and a quote form the documentation for your convenience:

https://www.atomicorp.com/wiki/index.ph ... ific_rules

"Once you have the rule manager open, and have pulled up a rule you want to modify just click on the down arrow next to the rules ID to open the rules options.

_________________
Michael Shinn
Atomicorp - Security For Everyone

Co-Author of Troubleshooting Linux Firewalls.


Top
 Profile  
 
 Post subject: Re: Disable OSSEC email alerts because of user-agent
Unread postPosted: Sun Jul 01, 2012 7:20 pm 
Offline
Forum Regular
Forum Regular

Joined: Tue Jun 09, 2009 12:57 pm
Posts: 134
mikeshinn wrote:
Quote:
Thanks, but clicking in the mail envelope toggles no action. similar interface problem I had with firewall rule management interface (update rule didnt work)


If I understand you correctly, thats not how you edit a rule. Those icons are indicators, clicking on them does not do anything. To change the configuration of the rule you need to click on the down arrow to the left of the rule ID, then you'll see the rule options, as documented in the link above.

Then you can set whatever options you prefer. I've provided a link to and a quote form the documentation for your convenience:

https://www.atomicorp.com/wiki/index.ph ... ific_rules

"Once you have the rule manager open, and have pulled up a rule you want to modify just click on the down arrow next to the rules ID to open the rules options.


ta-da thanks!

_________________
CentOS 6.3 (2.6.32.60-40.art.x86_64)
ASL 3.2.13-30.el6.art
Webmin 1.6.2
Virtualmin 3.99.gpl
Apache 2.2.15
PHP 5.3.3 (mod_fcgid/2.3.7)


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic Share/Bookmark  [ 5 posts ] 

» Feed - Atomicorp

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group