mirror of
https://git.freebsd.org/ports.git
synced 2025-05-13 07:41:50 -04:00
12 lines
499 B
Text
12 lines
499 B
Text
If you intend to use "firewall-drop" active response on this OSSEC instance
|
|
create the script:
|
|
%%OSSEC_HOME%%/active-response/bin/firewall-drop.sh
|
|
|
|
You can copy or hard link (symbolic link is not supported) one of the scripts
|
|
already provided by OSSEC:
|
|
%%OSSEC_HOME%%/active-response/bin/ipfilter.sh
|
|
%%OSSEC_HOME%%/active-response/bin/ipfw.sh
|
|
%%OSSEC_HOME%%/active-response/bin/pf.sh
|
|
|
|
For further steps see the documentation:
|
|
https://www.ossec.net/docs/syntax/head_ossec_config.active-response.html
|